MS-DEFCON 2: Make sure automatic update is blocked

Topic

New Reply

Tomorrow’s Patch Tuesday. Now’s a good time to double-check and make sure the patches won’t hit you the minute they roll out the Windows Update chute.
[See the full post at: MS-DEFCON 2: Make sure automatic update is blocked]

2 users thanked author for this post.

Microfix, abbodi86

Reply | Quote

Replies

But you’ve forgotten to move the little MS Patch Defence Condition button!

1 user thanked author for this post.

WildBill

Reply | Quote

‘Cause it’s only Monday. 

cheers, Paul

Reply | Quote

the MS-DEFCON level will be moved back down to 2 on Tuesday Dec. 10

Reply | Quote

The shield’s been changed today. Thanks, @woody… *chef’s kiss*!

Bought a refurbished Windows 10 64-bit, currently updated to 22H2. Have broke the AC adapter cord going to the 8.1 machine, but before that, coaxed it into charging. Need to buy new adapter if wish to continue using it.
Wild Bill Rides Again...

Reply | Quote

Only have the Nov 2019 Sec Only Patches installed on 1 out of 4 of my Laptops as the second oldest laptop would not boot into Windows after the Nov Win 7 Sec Only patch was installed and not being applied on failed restart(I suspect MSE is causing the issue). So currently I can not even think about Dec 2019’s patches until I can get Nov’s patching finished on 3 out of 4 of my Windows 7/64 bit laptops.

Fortunately it’s only DEFCON2 and the new year may arrive before Dec 2019’s patches rate at least DEFCON3 so plenty of time to try and get the Nov 2019 update issues fixed.

Reply | Quote

There is a ‘metered connection” setting in Windows Update/ Advanced Options. Should this also be set to metered connection/ on if you also set metered connection to on with your internet adapter?

Win 10 Pro v.20h2

Reply | Quote

“Download updates over metered connections” in Advanced options should be OFF
You don’t want to download over metered connections.

1 user thanked author for this post.

WildBill

Reply | Quote

[rhp52]

Thank you, PK.  Do we know if ‘pausing’ takes precedence over group policy changes, or vice versa? I’m confused after reading Woody’s article. Thank you for your patience.

Win 10 Pro v.20h2

• This reply was modified 5 years, 5 months ago by rhp52.

Reply | Quote

For Win10 Pro, these are the settings I use and why I chose them.
And here is a pic of the Group Policy setting.
I don’t use Pause at all.
I have never been forced for any update.

1 user thanked author for this post.

Cato

Reply | Quote

Thanks again….appreciate you taking the time to help. I’ve never had problems that i couldn’t figure out until  Windows Update in Win 10. Confusing!

Win 10 Pro v.20h2

Reply | Quote

up until a few months ago, clicking “Check for updates” would automatically install everything Microsoft had backed up for your machine, without giving you a chance to peruse the items on offer. It now appears as if Microsoft has seen the error of its ways, and no longer crams everything on your machine

When did this change?
in my late tests, clicking the button still crams everything

Reply | Quote

To be more accurate, there are Optional Updates which are offered and visible with third-party tools like WUMT, but not installed when clicking on “Check for updates”. One such example is Silverlight.
However, this is not changed behaviour.

Reply | Quote

I never use Microsoft Update (i.e. the one for Office and Silverlight.. etc…)

1 user thanked author for this post.

ch100

Reply | Quote

Seeker/cannon fodder report: nothing offered to my desktop, NAS or Dell Latitude E5420.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

Seeker report:

KB4533002 Cumulative Update for .NET Framework 3.5 and 4.3 for Windows 10 Version 1909 for x64
KB4530684 Cumulative Update for Windows 10 Version 1909 for x64-baseed Systems
KB4532441 Windows Autopilot update for Windows 10 Version 1909 for x64-baseed Systems

I have not configured my desktop for Windows Autopilot, but I did get the update.  On the other hand, this installation was born about ten years ago as a clean install of Windows 7 Ultimate (no upgrade path from XP, and I skipped Vista entirely), upgraded to Windows 8 Pro, then 8.1 Pro, and now Windows 10 Pro 1909.

So far, so good.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

bbearren wrote:

I have not configured my desktop for Windows Autopilot, but I did get the update.

On the other hand, I checked HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\AutoPilot\IsAutoPilotDisabled and it has a value of 0, which would suggest that perhaps it is enabled.

Always create a fresh drive image before making system changes/Windows updates; you may need to start over!

We all have our own reasons for doing the things that we do with our systems; we don't need anyone's approval, and we don't all have to do the same things.

We were all once "Average Users".

Computer Specs

Reply | Quote

They’re pushing people off 1809 harder it seems. I swear I hid a Feature Update to 1903 before, and now it’s back!

Reply | Quote

Feature Updates get renewed each month (each one represent the latest CU for 1903)

Reply | Quote

Wow! For the first time in, like, forever I don’t have to worry about Patch Tuesday!  I don’t have anything to patch! I’m currently using my Kindle HD10 with a keyboard they came out with not long ago and I fortunately had the foresight to buy.  My family all tell me to get a Mac but the cost is big! Plus none of my peripherals would work on it.  So after searching online, asking friends, etc (including on this forum) I’ve pretty much settled on a Google Chrome Pixelbook.  This little Kindle has been a great alternative, but I keep reaching for the mouse! Plus bigger would be better than the 10 inches this is. Thanks for all your help and I intend to stay on here just to keep up on things, but it’s SO nice not to worry about Microcrud’s updates!

Reply | Quote

Used your ComputerWorld article to defer my Win10 1903 updates and was able to defer 35 days rather than the 21 days shown in the article.

1 user thanked author for this post.

Latka

Reply | Quote

[Latka]

Same thing observed on Win10 Home 1903. I punched Pause Updates 5 times and deferred updates until January 16.

• This reply was modified 5 years, 5 months ago by Latka.

Reply | Quote

Windows 10 1903 here – Anyone have any tips on how to stop the automated process of installation once you click the “resume” button?  It would be great to review the information about the updates before Windows 10 does it’s thing.

What happens if I don’t pause it?  will it update without me clicking “check for updates?”  The reason I ask this is because I have seen screenshots of other people having the pending updates listed (so they can review it before installing), but they didn’t click “check for updates”.  wondering which way is better for me.

Reply | Quote

If you use Pause, when the Pause time is up, you have to install whatever is pending before you can Pause again.

Reply | Quote

Thank you.   I was wondering if .. I didn’t pause, would Windows updates would automatically update if I don’t hit “check for updates”?

Reply | Quote

If you have Win10 Home, you can set your network to metered connections and (supposedly) MS will not download the large updates until you remove the “metered.” You can also use wushowhide to hide the updates. These two things in addidion to Pausing.

If you have Win10 Pro, you can set deferral days in Windows Update under “Advanced Settings” and use Group Policy to prevent immediate download. That in addition to the settings you can use in Win10 Home.

Reply | Quote

[Latka]

With Win10 Home 1903, when I press “Resume updates”, it immediately checks for updates and lists what’s available. At this point, if you have a metered connection, it says “Pending download.” There is a “Download” button available, but nothing further happens if you do not click the “Download” button and you are not using a metered connection.

You then have the opportunity to run WuShowHide and hide the unwanted updates, or click “Download” for each offered update, one at a time.

I don’t see much use for the new pause updates feature in Win10 Home 1903. In addition to pausing various unwanted updates, it also delays implementation of new Security Intelligence Updates for Windows Defender Antivirus and the Malicious Software Removal Tool updates.

 

• This reply was modified 5 years, 5 months ago by Latka.

Reply | Quote