Tired of the bugs in Microsoft’s pushed patches? Here’s how to take control updating Windows 10.

Topic

New Reply

Full, step-by-step instructions in Computerworld.
[See the full post at: Tired of the bugs in Microsoft’s pushed patches? Here’s how to take control updating Windows 10.]

3 users thanked author for this post.

Fred, MrBrian, Noel Carboni

Reply | Quote

Replies

Woody, did you write a slideshow? Or did Computerworld take your article and make a slideshow? I was pretty surprised by that.

Reply | Quote

I wrote it as a slideshow. I’m convinced that slideshows work better than long posts – see

http://www.computerworld.com/article/3213199/microsoft-windows/10-tricks-to-button-up-and-lock-down-windows-10-creators-update.html

for a comparison.

The navigation in Computerworld’s slideshows isn’t all that great, but navigation in a long post is difficult, too….

Reply | Quote

I did recognize it’s usefulness, and viewed it as an editorial choice. I’m glad that choice lay with the author. Digestible chunks can reach multiple targets in the audience, not just the glazed eyes of board members on one hand, and bubblegum clickthroughs on another. It allows a tabbing to topic function over scrolling to bold print, that can help the under-caffeinated and unfocused as well. Not right or wrong, just one style or another.

The negative connotations come from the way it is relentlessly used by clickbaiters, as noted and responded to below. The worst examples promise an upcoming payoff on slide 20 if you just stick with it, then all you find is a third party link to get the promised payoff. The taint clings to a useful outline structure. Apologies offered, if more was read in my question.

Reply | Quote

Thank you, Woody, especially for the level of detail.

Reply | Quote

When you install Windows 10 you are constantly running triage on your own computer. Now occasional bug/glitches/etc. are a normal part of software development. However, with Windows 10 that is not the case. So rather than constantly looking at guides for this and that and constantly have to reapply a bevy of modifications to make Windows 10 usable I just sidestep all the lost time and effort by staying on Windows 7.

4 users thanked author for this post.

mikeding, Rock, windows7wasthebest, Cybertooth

Reply | Quote

Speaking of updating and the wushowhide tool, I’m not real techie when it comes to some of that stuff. I was wondering if it’s not too much trouble, if I post what is showing, if someone that knows more than me could offer a suggestion as to what they think I should hide. I numbered the entries for easy identification. Much appreciated.

1.  Intel – Other hardware – Intel(R) Watchdog Timer Driver (Intel(R) WDT)
2.  Intel – LAN – Intel(R) Ethernet Connection (2) 1219-V
3.  Intel – System – 3/14/2016 12:00:00 AM  – 1.2.0.0
4.  Intel – Other Hardware – Intel(R) 100 Series/C230 Series Chipset Family PCI Express Root Port #1 – A110
5.  Intel – Other Hardware – Intel(R) Xeon(R) E3 – 1200/1500 v5/6th Gen Intel(R) Core (TM) Host Bridge/ForwardDRAM Registers – 191F
6.  Intel – Other Hardware – Intel(R) 100 Series/C230 Series Chipset Family LPC Controller (Z-170) A145
7.  Intel – Other Hardware – Intel(R) Xeon(R) E3 – 1200/1500 v5/th Gen Intel(R) Core(TM) PCIe Controller (x16) – 1901
8.  Intel – Other Hardware – Intel(R) 100 Series/C230 Chipset Family Thermal subsystem A-131
9.  Intel – Other Hardware – Intel(R) 100 Series/C230 Chipset Family SMBus – A123
10. Intel – Other Hardware – Intel(R) 100 Series/C230 Chipset Family PMC – A121
11. Intel System – 4/4/2017 12:00:00 AM – 11.7.0.1014
12. Brother – Printers – Brother HL-2240 Series
13. HP – Printers – hp deskjet 5600 series (HPA)
14. Brother – Printers – Brother MFC-9130CW Printer
15. Alcor Micro, Corp. – Other Hardware, Removable Storage – Alcor Micro USB 2.0 Card Reader
16. Realtek Semiconductor Corp. – Bluetooth Controller – Dell Wireless 1801 Bluetooth 4.0 LE
17. Dell, Inc. – Firmware – 12/2/2016 12:00:00 AM – 2.1.8
18. Logitech – Other Hardware – logitech USB Input Device
19. Realtek Semiconductor Corp. – MEDIA – 8/12/2016 12:00:00 AM – 6.0.1.7908
20. NVIDIA – Display – 7/18/2017 12:00:00 AM – 22.21.13.8494

 

Reply | Quote

bobcat5536, I bought a dell laptop last year with Win 10 Home Ver. 1511.

I ran the Wushowhide tool on it and it came back with a similar list to what you got.

This was right out the box. I found that you can just ignore them. If your PC is working with no problems those updates won’t cause you any problems by leaving them alone. I would just pay attention to the patch tuesday offerings.

 

I don’t know why they are there. Out of the box at that.

Reply | Quote

I thought it might be a good idea to hide Dell items, the printers, realtek and nvidia items as well as USB  items and let the manufactures let me know if they need updates instead of windows messing it up. I’m thinking leave all the Intel stuff alone. Any thoughts on that ??

1 user thanked author for this post.

Cybertooth

Reply | Quote

bobcat5536, I would generally take a pass on hardware drivers of any sort unless I were experiencing issues with the current drivers. I would also go to the website of the company that made my PC or peripherals and see if there are any hardware updates there, then read up on them and decide if they add enough value to be worth installing.

Your mileage may vary but, in my experience, updating hardware drivers via Windows Update is a roll of the dice.

Keep Running Windows 7 Safely for Years to Come  
Make Windows 10 look and work like Windows 7

2 users thanked author for this post.

Snowflake Theory, woody

Reply | Quote

Looks like I’m going to hide 12 thru 20 and leave the rest, unless someone can see something I’m missing. Thanks all for the input. Much appreciated.

Reply | Quote

I would avoid all of them, head over to the Dell site, and install whatever they recommend.

2 users thanked author for this post.

johnf, bobcat5536

Reply | Quote

Will do…I  just remembered that Dell has their Dell Update program that checks for most of that stuff. If it needs any of it, it’ll let me know.  Thanks Woody

Reply | Quote

When it comes to drivers, the PC manufacturer is your best source. I don’t trust Windows Update, and I rarely bother with the component manufacturers, who seem to release some really buggy stuff.

Reply | Quote

Our friends at ZD Net use slide shows ad nauseum. No doubt it helps with the number of clicks the site gets, but I refuse to click through umpteen slides when the writers could just as easily use TEXT !

Not having a go at you Woody, but I abhor that practice.

Rant over ! 😉

1 user thanked author for this post.

Snowflake Theory

Reply | Quote

I hear ya … and a lot of material is better presented in a long, flowing style, like

http://www.computerworld.com/article/3213199/microsoft-windows/10-tricks-to-button-up-and-lock-down-windows-10-creators-update.html

But when things can be compartmentalized – turned into short chapters – I think the slideshow format is better. Regardless of clicks.

3 users thanked author for this post.

johnf, BobbyB, Noel Carboni

Reply | Quote

Well-written article, but the on-line slideshow is difficult to use while actually working on a computer to manage updates. There’s no practical way to save or print the article for use during the update process, since CW didn’t provide a way to print the slides. My Win 10 computer may or may not be able to go online for “live” slide viewing while I’m actually updating it, and using screen capture or memorization is cumbersome. I could fire up another computer to have the slides available online while updating, but a printable article would be so much more convenient.

-MD

Reply | Quote

Presuming the intent is to delay for some portion of a month while the dust settles after each set of patches, your scheme leverages the provided Microsoft feature set.

What we don’t really know is whether there are things they can/will push out that override the dialed-in delay. I suspect there are, though if they don’t exercise that functionality except in extreme cases I suppose it’s all right for most folks.

The concept that peoples’ / businesses’ computers can be critical to them for a period of time is not something that can or should be marginalized. Not every task is frivolous, nor can be stopped in the middle without consequences.

Bravo, Woody, for coming up with a simple suggestion to use what’s there to accomplish the goal of controlled yet regular system management.

-Noel

Reply | Quote

Just to share my experience with the push for CU feature update, of all the PCs I have on 1607 with the tweaking I did (only standard Windows settings and group policies, no wushowhide or metered connection), my PCs haven’t been forced to CU yet. All standalone PCs, no domain, WSUS or any other management tool.

Even the Windows home version I tweaked by pushing group policies directly in the registry haven’t been upgraded. Hope this 180 days delay holds up a bit until fall’s creator update gets the SAC seal of approval. I could maybe skip one version.

There is only one PC that has been forced to it and it is a laptop we forgot to send the tweaks to. Let me tell you the unsuspecting VP starting the update was probably very unhappy to loose his computer for a few hours in the middle of the day!

All I did to prevent this was using local group policies settings pushed only once. No ongoing Windows update management process. The downside is patches gets installed right away because I don’t use the other tricks to delay them, which is a downside to a lot of you. For me, I am ok with that. I prefer that to manually manage all this and if I find an issue, I will take care of it. My big concern is unwanted work disruptive feature updates.

Maybe the fact I use another language for Windows delays some feature updates a bit too, but the only one upgraded was the same language as the non upgraded ones. I think MS don’t push all the feature updates at once to everyone, but I find it an interesting coincidence if it is that the only PC updated was the one without the tweaks.

2 users thanked author for this post.

Elly, Noel Carboni

Reply | Quote

Since Woody’s method uses a metered connection, here are the cons of using a metered connection:

From https://www.tenforums.com/tutorials/3162-set-wireless-network-metered-non-metered-windows-10-a.html:

‘

• Any app that relies on an Internet connection to update or display info might be limited in the amount of data it can download or display.
• Windows will automatically download and install updates, except on metered connections. In that case, Windows [v1703] will automatically download only those updates required to keep Windows running smoothly.
• Apps downloading from the Windows Store might be paused.
• Start screen and Start menu live tiles might stop updating.
• Offline files might not sync automatically.’

Most of these bullet points are also mentioned at https://support.microsoft.com/en-us/help/17452/windows-metered-internet-connections-faq.

Topic for second bullet point: https://www.askwoody.com/forums/topic/win10-metered-connection-changes/.

2 users thanked author for this post.

AlexEiffel, woody

Reply | Quote

In my case, a lot of those cons are rather positives! 😉

1 user thanked author for this post.

abbodi86

Reply | Quote

If Windows 10 has downloaded updates but not yet installed them, and you want to prevent their installation, see How To Clear Windows Update Cache In Windows 10 and also the first post in https://www.askwoody.com/forums/topic/win10-machines-with-defer-feature-updates-now-getting-pushed-creators-update/.

Reply | Quote

There may be a logic bug in Woody’s method. (I don’t have Windows 10 installed yet, so I can’t confirm.) The possible issue is that if wushowhide doesn’t list superseded updates in the list of available updates to hide (does it?), then if you hide an update, the next time you use wushowhide, there may be available updates to hide that weren’t listed during the previous run, due to supersedence. An example: Let’s suppose I haven’t updated the computer for more than a few months. Suppose I hide the August 2017 Windows monthly rollup. During the next run of wushowhide, the July 2017 Windows monthly rollup should be listed as an available update to hide. The July 2017 Windows monthly rollup wasn’t listed during the first run of wushowhide (unless wushowhide lists superseded updates in the list of available updates to hide).

 

Reply | Quote

I see that in post #131493 I used an example not relevant to Windows 10, so I’ll now give a Windows 10-specific example. Suppose you’re using Windows  10 v1703 and are currently using build 15063.483, released on July 11. According to https://support.microsoft.com/en-us/help/4018124, there are two newer builds of Windows 10 v1703 than 15063.483 that are available on Windows Update. Let’s suppose you did not use wushowhide since July 11, and thus have not hidden either of the two newer builds. Today, you use wushowhide. If wushowhide works as I’m guessing it does (does it?), you will only see the newest of the two newer v1703 builds, 15063.540. You hide the newest build 15063.540. Notice however that you have not hidden 15063.502. Thus, the next time that you run Windows Update, I believe that build 15063.502, which you did not see on wushowhide, will download and install :(.

Reply | Quote

I’m not quite in the right situation to help you determine the answer to the above, as I have 15063.540 in already, but I decided to run wushowhide.diagcab. This reminded me:

As I have seen before, it absolutely won’t display anything because I haven’t enabled and started the Windows Firewall service, which I refuse to do (I have a 3rd party package that manages the Base Filtering Engine rigorously).

Before running the test I reconfigured my 3rd party firewall setup so that all the online sites the Windows Update service attempts to contact are allowed (you can see all the green arrows indicating successful connections). You can also see that it contacted these sites, yet failed anyway:

sls.update.microsoft.com
fe2.update.microsoft.com
ocsp.digicert.com
ctldl.windowupdate.com
www.microsoft.com
download.windowsupdate.com

When it works, there’s always something showing in this dialog, and I haven’t hidden anything since installing v1703.

However, under these same conditions .msu files CAN be installed from the catalog. That’s how I have it up to build 15063.540.

I can’t help but interpret this as follows:

If Microsoft can’t make secret under-the-table exceptions to the firewall rules through the Windows Firewall service, their Windows Update service refuses to even check for available Windows Updates.

This is NOT acceptable, and time isn’t going to make it acceptable!

Thus Windows 10 is unacceptable for use in a security-conscious environment.

That Windows Update won’t even think about updating this system with the other aspects of my environment setup is kind of a bonus (I’m in control about 4 ways from Sunday), but it still doesn’t make Windows acceptable.

-Noel

4 users thanked author for this post.

johnf, Elly, HiFlyer, Fred

Reply | Quote

This post from another site seems to be an instance of this issue:

“WUShowHide doesn’t seem to work any more at hiding, for instance, graphics driver updates. WU still installs the version one before the current one.”

1 user thanked author for this post.

woody

Reply | Quote

As a test, I installed the first released build (Current Branch) of Windows 10 v1703 x64 Home edition (build 15063.0) in a virtual machine with no internet access. Then I allowed internet access and ran wushowhide. In its list of available updates to hide, there were no updates that were superseded by other updates on the list; this is what I expected to find. I hide 4 of the 5 updates shown, including the cumulative update KB4034674 (Build 15063.540). Then I ran wushowhide again. There were no updates available to hide that weren’t listed the first time; this was unexpected by me. I rebooted and ran wushowhide again, and again there were no updates available to hide that weren’t listed the first time. Then I ran Windows Update; unexpectedly, it didn’t list the next-oldest version(s) of any of the updates that I hid. I rebooted and waited for a few hours to hopefully let automatic updates do its thing. Then I rebooted. End result: no next-oldest versions of any of the updates that I hid were installed.

It seems that the semantics of hidden updates changed from Windows 7. In Windows 10 v1703, Windows Update (either manual or automatic updates) apparently won’t install available updates that have been superseded by any hidden update. Disregard what I said in post #131493.

Reply | Quote

MrBrian wrote:

This post from another site seems to be an instance of this issue: “WUShowHide doesn’t seem to work any more at hiding, for instance, graphics driver updates. WU still installs the version one before the current one.”

Same here. Discouraging…..

* _ ... _ *

Reply | Quote

You’ve experienced this issue apparently? If so, there are two solutions:

1. If you hid an update during the last run of wushowhide, then you need to run wushowhide again, and keep doing so until the last run of wushowhide has no updates listed that you hid during the last run.

2. One-pass solution: Use a program that is both capable of hiding updates, and can list available updates that are superseded by other available updates. Other than some publicly available scripts, the only program that I know of that can do this is Windows Update MiniTool with checkbox “Include superseded” ticked. Note: Woody has decided to not recommend Windows Update MiniTool because its developer(s) are anonymous.

5 users thanked author for this post.

Elly, HiFlyer, Noel Carboni, ch100, woody

Reply | Quote

To put things straight, the developers are not anonymous, but somehow difficult to identify.
The main and possible only developer is in Russia or in one of the former Soviet Union countries and may not speak English, or not well enough.
There are few well known people on other forums who are in constant communication with the developer and regularly updates are released based on feedback.
Those who are interested can find out more by searching on Google or by donating to the developer from the link in the software.
The activity of the software can be monitored with Microsoft tools and with Wireshark and it was already proved that WUMT does what it claims and nothing else.
Woody is under no obligation to promote any third-party software and there are good reasons to be so and I believe that this is clearly understood and accepted. This does not mean that any software which Woody does not endorse has issues. It is up to each user to make up their own mind based on their own assessment and possible on others points of view.

4 users thanked author for this post.

HiFlyer, MrBrian, Noel Carboni, Kirsty

Reply | Quote

From Windows Defender doesn’t auto update definitions:

“With Windows automatic updates disabled by setting metered connection on, Windows Defender will not automatically update the virus definitions.”

Reply | Quote

In my test of build 15063.0, Windows Defender definitions did not automatically update on a metered connection.

Reply | Quote

Changing your network connection(s) to unmetered when you want to run Windows Update manually appears to be unnecessary, unless you’re experiencing this issue.

Reply | Quote

MrBrian wrote:

If Windows 10 has downloaded updates but not yet installed them, and you want to prevent their installation, see How To Clear Windows Update Cache In Windows 10 and also [SNIP].

My PC has Windows 10 Home 64-bit Version 1709 Build 16299.194. I went to Installed Updates in Control Panel and uninstalled the update that was downloaded and that I don’t want installed (yet). Isn’t that enough to keep it from being installed? Would following the steps to clear the Windows Update cache stop Windows from nagging me to restart and from restarting my PC itself?

Reply | Quote

Uninstalling in Win10 is NOT enogh to keep it from installing again.

First, you need to download wushowhide from Microsoft – it will let you HIDE the update.

Then read Woody’s ConputerWorld article on how to Block Forced Win10 Updates.

There is also a free tool to block Win Updates – See this topic under the Tools Forum

1 user thanked author for this post.

Know Whey

Reply | Quote

PKCano wrote:

Uninstalling in Win10 is NOT enogh to keep it from installing again. First, you need to download wushowhide from Microsoft – it will let you HIDE the update. Then read Woody’s ConputerWorld article on how to Block Forced Win10 Updates. There is also a free tool to block Win Updates – See this topic under the Tools Forum

Thanks. I neglected to write that I stopped and disabled the Windows Update service as Susan advised here. Will Windows try to download the uninstalled update in spite of this?

I’d read that Computerworld article before and the only action I could take since I have Home, not Pro was to set my internet connection to metered, but Windows Update eventually downloaded updates in spite of it.

Reply | Quote

If you set your Internet connection to metered, it affects more than Windows, it affects your connection.

I thing the trick is to set the connection to metered, then use wushowhide to hide the update. Once the update is successfully hidden (you can verify after hiding), you can take the connection off metered when you need to. But before you do each time, you need to run wushowhide to be sure that nothing is waiting out there to bite you.

It becomes a game of cat and mouse.

OR you could spend the $100 to upgrade to Pro.
I am currently supporting 2 Win10 machines. One came with Pro. The other, which came with Home, I required the User to upgrade to Pro before I agreed to support. It’s just not worth the hassle.

1 user thanked author for this post.

BobbyB

Reply | Quote