Keeping Win10 updated gets more complicated

Topic

New Reply

---

On Security

Keeping Win10 updated gets more complicated

By Susan Bradley The current branch of Windows 10 Anniversary Update has more than a few lumps. With Version 1607 installation failures, nearly weekly cumulative fixes, and problems with the Sept. 29 cumulative update, keeping AU up to date requires some careful steps.

---

The full text of this column is posted at windowssecrets.com/top-story/keeping-win10-updated-gets-more-complicated/ (opens in a new window/tab).

Columnists typically cannot reply to comments here, but do incorporate the best tips into future columns.

Reply | Quote

Replies

Unfortunately, the inability to defer updates is one of the hidden costs of a “free” Win10 Home upgrade.

Are you saying there is a difference between Win 10 Home’s free upgrade and the version one will get when buying a new PC today with Win 10 Home installed or when buying a copy of Win 10 Home off the shelf?

Reply | Quote

Are you saying there is a difference between Win 10 Home’s free upgrade and the version one will get when buying a new PC today with Win 10 Home installed or when buying a copy of Win 10 Home off the shelf?

No. The difference is between the Home SKU, regardless of how it is obtained, and other SKUs such as Pro, Enterprise and Education.

--Joe

Reply | Quote

No. The difference is between the Home SKU, regardless of how it is obtained, and other SKUs such as Pro, Enterprise and Education.

Yes, of course, that’s what I thought, but Susan’s remark implied “hidden costs” of the free Win 10 Home upgrade.

Reply | Quote

I’m always surprised when I read the instructions on how to do something and find that for whatever reason, things on my computer are different than the one used by the author.

I have Win10Pro, had previously deferred upgrades and used group editor to set updates to notify only, so I’m not entirely unfamiliar with this general process. However when I went looking for:
{Computer} Configuration/Administrative Templates/Windows Components/Windows Update/Defer Windows Updates
I found that this sub-branch does not exist. To be exact, the Defer Windows Updates sub-branch doesn’t exist.

Is it possible that this only applies to systems that are part of the Insider program?

Reply | Quote

Could this be due to differences between 1511 and 1607?

This article (link was provided in Bradley’s column), indicates policy naming differences between the two builds…

Configure Windows Update for Business (Windows 10)

Reply | Quote

Could this be due to differences between 1511 and 1607?

This article (link was provided in Bradley’s column), indicates policy naming differences between the two builds…

Configure Windows Update for Business (Windows 10)

Reply | Quote

I did have this issue with KB3194496 and I am part of the Insider program. Even the Windows update troubleshooter did not work as I ran it 4 times. I can confirm that the Regedit XblGameSave is what worked on my system. I did not try the Media Creation Tool.

Quando Omni Flunkus Moritati

Reply | Quote

It’s been my experience that Windows Update honors metered connections (specifically, it doesn’t use them to download updates). Marking your hotel/conference/slow Wifi connection as “metered” might be preferable to mucking about in gpedit to entirely pause updates.

Reply | Quote

Susan,

After contacting you a few times about the problems with controlling Win10 updates, you finally ALMOST have me convinced to go for the $99 Pro upgrade. I have two questions first, however:
1. Once I upgrade and set things up the way you discussed in this article, is there a way to view what updates are have been deferred from installing?
2. Once I receive your OK to install a deferred update via Windows Secrets, how do I remove the deferral and let the update process?

Two other update questions:
1. I’m STILL waiting for MS to offer the AU (1607) on one of my PCs. I tried to do it without receiving the offer about four times, all of the attempts failed to complete. So I removed the AU upgrade app from the PC thinking that might be preventing the offer from MS. Any advice on how I might get and apply the AU?
2. It appears that Office 2016 programs are being updated without prior notice and the updates are NOT listed in the Update History. I’m getting notices from Secunia PSI that updates are being made. What’s up with this?

Thanks so much!

Reply | Quote

Susan,

After contacting you a few times about the problems with controlling Win10 updates, you finally ALMOST have me convinced to go for the $99 Pro upgrade. I have two questions first, however:
1. Once I upgrade and set things up the way you discussed in this article, is there a way to view what updates are have been deferred from installing?
2. Once I receive your OK to install a deferred update via Windows Secrets, how do I remove the deferral and let the update process?

Two other update questions:
1. I’m STILL waiting for MS to offer the AU (1607) on one of my PCs. I tried to do it without receiving the offer about four times, all of the attempts failed to complete. So I removed the AU upgrade app from the PC thinking that might be preventing the offer from MS. Any advice on how I might get and apply the AU?
2. It appears that Office 2016 programs are being updated without prior notice and the updates are NOT listed in the Update History. I’m getting notices from Secunia PSI that updates are being made. What’s up with this?

Thanks so much!

Remember deferring updates only defers feature updates not security updates. Updates are deferred for a few months. Up to 4 months I think.
See Windows 10 update history for more information on fixes. You don’t have to do anything once the time period has passed you’ll get the update(s). Remember Windows 10 updates are cumulative so that when you get an update you get everything released up to that point.

AU – have you tried disabling your A/V, disconnecting from the internet, disconnecting any external peripherals? You might also create a USB device using the Media Creation Tool.

Office 2016 is serviced using click-to-run technology. This is done outside Windows Update. You’ll get updates automatically and without prior notice. Updates are not listed in Update History because they are not using Windows Update.

--Joe

Reply | Quote

For those of you who do not read Woody Leonhard’s blog (https) AskWoody (dot-com), let me go over this Defer Windows 10 Updates business one more time.

First, study and apply the Leonhard-Carboni fix in this article:

http://www.infoworld.com/article/3053701/microsoft-windows/block-windows-10-forced-updates-without-breaking-your-machine-part-2.html

Then, set your devices to Metered Connection. (This does no good if you are on a wired (Ethernet) connection. For that situation, special Registry and possibly Windows Update Services changes are necessary, and I do not recommend taking this approach if you have a wired connection.) Leave it that way for most of the month, until the bugs shake out of the current batch of updates, especially the latest Cumulative Updates.

Use wushowhide to hide all but MSRT, Flash Player and other critical security updates (few and far between). Make the Group Policy or Registry changes or apply Noel Carboni’s .REG File. Works equally well on Home and Pro Editions. No special Branch needed. Leave everything hidden and switched off until Woody Leonhard gives at least an Amber condition (MS-DEFCON-3) or better.

All of these changes are fully reversible and the tools to do so are included in Woody Leonhard’s Infoworld article.

Keep the Anniversary Update Hidden, but when ready, keep the Metered Connection On, but run wushowhide and unhide the OK To Apply patches and CUs for the month. Now and only now, un-Meter the connection and let ‘er rip. Everything except the AU should now download and be applied, under our own control.

Further, go into Advanced Options and set up your Restart Schedule to a likely low or no usage time and day. All editions of Windows 10 can do this, as of the Anniversary Update, and Pro could do this under version 1511.

Once patched safely, go back to a Metered Connection and use wushowhide during the month to hide untested or not ready for prime time patches, especially the most recent CU.

Do not attempt to defer any patches except the AU for more than a couple of months. Doing so can really destabilize the updating process, as each new CU builds upon the previous patches. But each new CU contains all previous patches from the version number you have installed. Version 1607 will have all since the AU, and Version 1511 will have everything since installing that upgrade. (This is why some systems will experience very long download and restart times some months. You get whatever MS Updates finds missing, kitchen sink and all.)

One more thing which can make in-place upgrading a royal pain: Do not under any circumstances remove the built-in “infused apps” from Windows 10! Or, if you do so, put them back using then Microsoft Windows Store Reset diagnostic cabinet before attempting any big upgrade. If the MS Store App is in any serious way damaged prior to a big upgrade, or if any of the Infused Apps is missing or damaged, the upgrade may fail and a full Fresh Install will be needed. Been there, done that. It’s OK to hide apps or even hide the entire Tiles side of the Start Menu. But don’t rip the Infused Apps out, especially the Store App.

Only a truly uninstallable or completely toxic (blue screen or endless reboots, etc. ) patch should be deferred as long as wushowhide will permit. But the next big upgrade (Redstone whatever) should include all the CUs and patches leading up to its release. When applying the AU, the same principle applies. Hidden updates should be unhidden before any big Windows 10 upgrade, as in the past. (If a patch absolutely will not install, the next upgrade will need to be a Fresh Install, unfortunately. I have a colleague who had this happen to him on one of his PCs.)

As far as I know, the limit for deferring any patch with a Security rating through wushowhide is four months, and Feature Upgrades can be deferred indefinitely. This is based on my own experiences only, and not a definitive answer.

Of course, you can also direct Windows Updates to never, never offer you driver updates. I recommend this setting. Again, all Windows 10 editions can do this.

So we can regain control of updating under Windows 10, Home or Pro, without going through hoops or joining the Better Business Branch or whatever. It does take some ingenuity (Thanks to Carboni, Leonhard, Susan Bradley and others!) but it can be done.

I also recommend the privacy controls of ShutUp 10:

https://www.oo-software.com/en/shutup10

All up to date for the Anniversary Update and ready to go. Works under Version 1511 and even Original Windows 10, Home and Pro.

Also, to keep Settings in one List, I use the godmode Control panel trick:

https://www.cnet.com/how-to/activate-godmode-in-windows-10/

Still works under Windows 10 version 1607 (AU).

Enjoy! And Happy Patching!

-- rc primak

Reply | Quote

For those of you who do not read Woody Leonhard’s blog (https) AskWoody (dot-com), let me go over this Defer Windows 10 Updates business one more time.

Can anyone read this and other similar lengthy posts about how to force Windows to behave more reasonably and not hear a swirling noise as Microsoft inexorably spirals down the bowl?

This is a classic example of the “Emperors New Clothes”.

Reply | Quote

Can anyone read this and other similar lengthy posts about how to force Windows to behave more reasonably and not hear a swirling noise as Microsoft inexorably spirals down the bowl?

This is a classic example of the “Emperors New Clothes”.

Microsoft certainly has misjudged us power users on this topic. Many, many threads in a lot of forums attest to this. And yet, MS seems to pitch Win 10, even Pro, to the lowest common denominator — the simple-minded end user (what Leonhard affectionately calls “dummies” ) who wants to wake up each morning to a PC that “just works” like an iPad or a Chromebook.

I say, let such people get an iPad or a Chromebook. That way power users can use Windows 10 Pro the way we want to use it, and retake control of our computing needs.

But wait! How will M$ monetize that type of user?

With Office licenses, memberships in TechNet and other developer oprganizations, and general goodwill among small to medium business owners and IT pros. That’s how MS has made money all this time.

But that’s not enough for the New Microsoft — they must make more money, faster. And Apple shows the way with their walled-garden of hardware and Apps, each one a pay as you go subscription audio and video extravaganza! That’s been a successful business model for Apple, but this is not what Microsoft is or should be.

Just my opinion, but based on a lot of tech reading and commenting. And fielding the slings and arrows from folks who feel the exact opposite from me!

-- rc primak

Reply | Quote

Could somebody kindly explain to Brits such as myself, who do not speak American, what an infused app is. It’s hard to imagine pouring boiling water over a computer.

Reply | Quote

Could somebody kindly explain to Brits such as myself, who do not speak American, what an infused app is.

‘infused’ = default, built-in

Reply | Quote

Thanks. I thought it must be that, but a strange word to use in this context.

Reply | Quote

Shirley it would not be too much to ask, that we be given these (powers)settings –
– W10 asks our permission to download updates (I could live without this, but it could be handy)
– W10 DEFINITELY asks our opinion before it commences doing updates.

Why are people not demanding the latter ?

Rob
PS Two of my neighbors have their W10 computers ‘ruined’ from powering off during updates.

Reply | Quote

Sorry to yell but… STOP MIXING THE TERMS UPDATES AND UPGRADES…

Microsoft has blurred the line by calling things like the AU an update when it’s actually a feature (version) upgrade. MS allows you to defer upgrades but not updates.

Am I the only person who finds it terribly confusing when people fail to distinguish between these two things in discussions? Am I the only person who gets confused when someone talks about deferring an update? I cannot believe that this isn’t confusing the public at large.

Reply | Quote

Sorry to yell but… STOP MIXING THE TERMS UPDATES AND UPGRADES…

Microsoft has blurred the line by calling things like the AU an update when it’s actually a feature (version) upgrade. MS allows you to defer upgrades but not updates.

Am I the only person who finds it terribly confusing when people fail to distinguish between these two things in discussions? Am I the only person who gets confused when someone talks about deferring an update? I cannot believe that this isn’t confusing the public at large.

Have to agree with you. It is confusing when folks have no clue about their computer other than brand name and that it’s running Windows 10. Adding to the mix is the 2 Versions, RTM and Insider Preview. And I do have the same problem in folks not knowing the difference between Upgrade and update, has always been a new Version is an Upgrade over the older one. Build numbers seem to be more like the Service Packs such as in Win7 and earlier.

Before you wonder "Am I doing things right," ask "Am I doing the right things?"

Reply | Quote