|
Patch reliability is unclear, but widespread attacks make patching prudent. Go ahead and patch, but watch out for potential problems. |
.Nag me all you want, Microsoft, but this is getting ridiculous. All I want is an “Off” button — until you figure out how to deliver reliable patches
[See the full post at: Watch out: Win10 Update Facilitation as a Service and a new push for the Update Assistant]
walker, 
Terry Muench, 
ve2mrx, 
Fred, 
Ascaris, 
Elly, 
Laptop Boy, 
Mr. Natural, 
abbodi86, 
JohnW, 
Norio, 
Cybertooth Makes me wonder how long until “no” or “X to close” is “yes”?
MS already did that once. They switch NO to Yes and Yes To YES. They called it a bug/human(AI) error. MS can not be trusted and slowly sky has been falling for years at MS. It is time to pull the plug on MS and move to another OS that is more reliable…..MAC/UNIX/LINUX/REACTOS…Which should we chose??????? You are our only hope….
Suggestion:
After the preliminary preparing/download, before you restart, Set metered connections.
Immediately after reboot/login, delete (permanently) the C:\Windows\UdateAssistantV2 folder.
(No guarantees. It may be too late.)
Going To cross my fingers and roll the dice. ( not right away tho )
Thank You 
Re PKCano’s posting, I’m glad to say that my Windows does not have an Update Assistant folder. I forestalled an override of my WU disabled status last week, and monitor the situation daily, overriding the override as soon as I catch it!
Has anyone created a parallel Windows 10 GWX Control Panel program?
Has anyone created a parallel Windows 10 GWX Control Panel program?
Late to the party. Surfing Pensioner mentioned it here:
https://www.askwoody.com/forums/topic/patch-lady-windows-10-update-facilitation-service/#post-198504
I remember when updates didn’t cause people to have aneurysms. For the most part the patches worked, and most could either install or not with the “flick of a switch”.
Now, the process is a constant white knuckle ride – Way too much reading, work and settings confirming to be enjoyable. I’m almost tempted to go back to v8.1 as that seems to never get mentioned anymore in relation to patching issues unlike v7.
Linux just isn’t easy enough to use for the average user and it is a pain to play games intended for Windows. I don’t much like the cumulative updates as it takes extra reading to figure out what you are getting (eg. update assistant v2).
I’m currently being held hostage paying for the equipment to run an OS that is working against me – turning my computer into an adversary rather than an ally.
I know this is all anecdotal but, if my 74 year old dad with no PC experience in his professional life can use Linux (Kubuntu) so can you. He was confused by Windows 8 so, I installed Linux (Kubuntu 14.04) as a possible replacement, haven’t looked back. He emails, browses the web, watches Netflix and uses Skype. I don’t help him every other day due to some goofy update (except for the occasional Skype Update), strange prompt, or change making the system different. Win-Win.
Linux Mint user here. I switched about five years ago and never looked back. Yes there was a learning curve, but mostly it was because I was used to doing things the Windows way. If you guys only knew all the c**p you’re put through because of Microsoft. My system just works and I can focus on other things.
@dph853 Re: Ur post #198531
“…I’m almost tempted to go back to v8.1 as that seems to never get mentioned anymore in relation to patching issues unlike v7.”
Come on in, for now the water is fine (v8.1 with Classic Shell) until v8.1 gets the v7sp1 M$ treatment. Beginning Linux migration now. 
?
Beginning Linux migration now.
For those about to Linux, we salute you. Or welcome you, at least!
I am fairly new to Linux (been using it frequently since 2015, and as my primary OS for oh, I’m thinking it has to be about a year or so), but I’ve already learned a lot about it. It’s not perfect, but it has one must-have feature that has been deprecated in Windows… control over one’s own computer.
The really frustrating thing (well, one of them) is that I can tell that Windows 10 would be a really fine OS if MS would stop being ridiculous with it. Stop trying to control my PC and dictate the terms by which I use and update it; stop with the rapid-fire feature updates; stop with the slow march toward the touch-centric UI when the vast majority of your users do not and will not be using touchscreens in Windows. The full desktop interface is still there, so just let us use it for everything we used to in Windows 7!
If MS did these things, Windows 10 could be really decent. The really hard stuff about making a good OS is already done… just stop trying to be king of my desktop and deliver another OS in the mold of 7 and XP.
Of course, we know that’s not in the cards. MS has other plans for Windows 10 beyond simply developing and selling an OS, and there seems to be nothing we can do to convince them otherwise. Well, okay then, MS… good thing you love Linux now, ’cause that’s where this nearly 30 year user of Windows is going. That’s not a threat, since I already have accepted that MS is doing this intentionally. It is what it is, and while there are areas where Windows is clearly superior to Linux, they don’t matter much if that Windows is so poisoned that anything else would look good by contrast. I just can’t stomach the idea of having such an adversarial relationship with my OS developer, where they’re scheming new ways to override my own control over my PC (MY PC!) in order to further their own agenda. It only adds insult to injury when they try to justify their actions in terms of helping the Windows user to have the best (whatever). Now Biff, don’t con me!
Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon 6.2
XPG Xenia 15, i7-9750H/32GB & GTX1660ti, Kubuntu 24.04
Acer Swift Go 14, i5-1335U/16GB, Kubuntu 24.04 (and Win 11)
Perhaps some behavioral genius within MS, of course utilizing AI and the Cloud, is using W10 to socially engineer mass “Stockholm Syndrome” among W10 OS users. W10 clients will become quiet and compliant and come to view “abuse as a service” as their individual prerogatives are gradually eroded. I find it interesting that MS still charges an upfront licensing fee for W10 and then forces us all into this canard W10 as a service when the services do little other than degrade control and usability. Where do you want to go today? Hopefully, it is somewhere consistent with where MS is taking you.
Dear Woody,
We will update our Microsoft Windows operating system as we see fit in accordance with the methods and practices that we, in our sole judgment, decide will provide the best experience and in accordance with the terms of the License Agreement.
Love,
Microsoft
All I want is an “Off” button
FYI, the non-Microsoft Sphinx firewall software I purchased to run on all my systems can serve as an “off button”. Okay, it’s literally a checkbox, not a button in version 8.4…
Be aware that maintaining a deny-by-default firewall configuration is not trivial – though this particular package makes it easier than all the others I’ve seen – but it does give you ultimate control.
I haven’t had an unexpected or unwanted update on any of my systems literally in years.
-Noel
@Noel
+1 Great deny-by-default
Do you block wu or ms from Domain Names? or can you block wu?
What are some other good domain protection do you use (if you dont mind sharing)?
TIA
Back to fishing for better dreams
This firewall package allows a combination of specifying an application (e.g., svchost.exe) and a zone containing a list of rules that specifically allow or block things.
When I actually WANT to do updates, I reconfigure the svchost.exe entry from one zone that does not allow connections to Windows Update servers to another that does. This is the normal zone:
The zone that allows connections just has more entries and looks like this:
Please see this page for a summary of my security setup:
https://www.askwoody.com/forums/topic/a-description-of-my-quite-effective-security-environment-long/
-Noel
Your warnings about Windows 10 are great. I hate to see Microsoft consumer products go the way of the dodo bird, but that’s what MS is causing to happen. They know this. They plan focus service on high paying Enterprise customers with a pure Microsoft 365 subscription model, in the upcoming decade. Office 2019 will be the last stand alone version of MS Office. Linux Mint and Chromebooks are a viable alternative that won’t drive you crazy or use excessive bandwidth to download cumulative updates.
GreatAndPowerfulTech
All I want is an “Off” button
Found it! Has been working well for me with Win10 Pro for almost 2 years.
“[gpedit.msc]Local Computer Policy > Computer Configuration > Windows Components > Windows Update > Configure Automatic Updates”
This setting will also disable update options related to “deferral” in “Windows > Settings> Update & Security”, except for the manual “Check for updates” button. Caution, if you do click that button, make darn sure you have wushowhide well in hand first, because you will get everything down the chute that is not hidden!
Windows 10 Pro 22H2
This can also be done via registry on Home.
The problem is, MS is dumping this update on machines that have WU disabled and/or the wuauserv stopped.
The goalposts are being moved on an almost daily basis. “I have altered the deal…pray I don’t alter it further.”
Yes, but this group policy has actually kept all the c**p from MS off my PC until I am actually ready for it. I don’t think it’s the same as the registry hack.
In two years no MS updates have ever arrived by surprise. Nothing has been forced on me without first pushing the “Check for updates” button. I’m on 1709 now.
My process:
1. Take image with Macrium.
2. Run wushowhide and hide anything I don’t want. With Win10 it’s a c**p shoot because everything is bundled, but at least I can hold off the feature updates as long as I want.
3. Push the button after Woody gives the all clear, I usually let the monthly updates install, unless there are known issues.
Windows 10 Pro 22H2
My VM is set that way.
So what does this part I’ve marked in red of the Windows Update page in Settings mean in light of that policy?
-Noel
Windows 10 Pro 22H2
Windows 10 Pro 22H2
Windows 10 Pro 22H2
This update is not really as much harmful as KB4023814 & KB4023057
it seems just a helper for KB4023057
Windows 10 Pro….Just did install the June updates. As soon as they were installed and as soon as the desktop showed after restarting, I killed my internet connection. First thing I noticed, was there is no more Update Assistant listed in the Programs and Features list like before. I deleted it from the C/Windows directory and then restored my internet connection and checked for any more updates. Stated everything was up to date. As far as changing or resetting any settings pertaining to windows update ( Group Policy, Windows Update Blocker, Etc ), everything was left unchanged. I think I was able to get rid of it before it could cause any grief, simply by killing the internet connection to keep it from phoning home. So far everything is working okay and no problems. If anything changes, I’ll post back.
When maintenance of the tool that you use to accomplish some tasks, consumes more of your time and energy than you spend on and with the actual task, the tool probably is a lousy one.
Use another tool instead. Worse than Windows none of the alternatives can get.
Its not just the carricature of “updating” that Microsoft runs as a running joke since years now. Its the lacking stability and reliability of Windows, too. This garbage in the 6 months I use it on a secondary rig gives me more BSOD and technical issues than 98SE and XP in all their years together. Thank goodness I only use it for a race sim, not professionally. All my other tasks and professional tasks are running on another system, under Linux.
>> The only reasonable way to run Windows 10 is – not to run it. <<
“All I want is an “Off” button — until you figure out how to deliver reliable patches and upgrades.”
Surely you want an “Off” button whether or not they figure out how to deliver reliable patches and upgrades, to retain control of the upgrades.
Windows 10 Home 22H2, Acer Aspire TC-1660 desktop + LibreOffice, non-techie
Maybe it should read:
“All I want is an “Off” button, to use until you figure out how to deliver reliable patches and upgrades.”
Next stop: Group W.
I may or may not get malware if I don’t patch, but it seems I’m definitely going to get malware from Microsoft if I do.
it never ceases to amaze me how Microsoft likes to waste its time making unnecesary software instead of improving and testing its updates…
If they were tested and improved even Mr.Woody and Miss.Susan would encourage us to update right away.
It never ceases to amaze me how Microsoft likes to waste its time making unnecessary software instead of improving and testing its updates… If they were tested and improved even Mr.Woody and Miss.Susan would encourage us to update right away.
If Microsoft “suddenly wants” to improve and test its updates better, I don’t think it will be able to maintain its schedule of two Windows 10 “feature updates” each year as resources will have to be diverted since it no longer has a test department. It will have to reduce the frequency of these useless “features updates” to once per year or even longer. I don’t think Microsoft (and Nadella) wants to do that.
Since it is obvious that Microsoft will keep to its twice-a-year schedule, we can’t expect it to “improve and test” its updates. In fact, it seems to me that it purposely does as little testing as possible and delegate those so-called testing to “insiders” and “home users”. How can the updates not be problematic due to these policies?
As a PC user who is staying away from the Windows 10 fiasco (apart from a single machine on which Windows 10 LTSB is installed for testing purposes), Windows 10 seems to me to be more and more ridiculous by the day. I have been of the opinion that there is no point in using it at all at this time (well, at least the “Home” and “Pro” versions) since its release nearly 3 years ago, and Microsoft has done nothing to change my opinion in these 3 years. The LTSB is the only version of Windows 10 that I consider worthy of using, and it is still worse than Windows 7 and 8.1.
Hope for the best. Prepare for the worst.
I’m curious: If MS claimed that ” “our Update Assistant” is helpful to users “, would that be an oxymoron wrapped around another oxymoron?
Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).
MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV
Nothing Microsoft does in terms of forcing updates and upgrades surprises me anymore. They seem intent and giving end users no choice in accepting updates and upgrades and anyone who tries to stop them will eventually be defeated. If Microsoft would only expend its energy making sure these updates were properly vetted rather then creating ways to force them onto devices before they are.
I have a Dual Boot Win 7 Pro x64 and Linux Mint 18.3 and use KeePass2 for password management. My KeePass database file *.kdbx transfers between Windows and Linux Mint very easily. You may want to give it a try. Available in LM Software Manager Depository.
Getting serious about Linux finally. Migrated my bookmarks, typing in passwords by hand (massive pain in the neck), and set up e-mail. If I want to play a game, just boot up Win 7 with the internet connection disabled.
When I set up the Linux laptops the first time it was a [pain] to move the bookmarks. Then I discovered that you could move the Firefox and Thunderbird profiles from Windows to Linux and have an identical experience if you used the Linux versions of those programs. It will even recreate the extensions and settings. Moving the T-bird profile will recreate all the emails settings and LIghtening (calendar) entries. If I had known that when I first started playing with Linux and Mozilla, I would have less gray hairs.
When I set up the second laptop, I just installed Firefox on the PC, used the tool to move my IE bookmarks to FF and them moved that new profile. I liked FF so much I stopped using IE.
I now back up the Firefox and Thunderbird profiles regularly for just that purpose.
I’d call this malware-behavior. How long before a decent virusscanner detects Windows 10 as a genuine virus and put the whole mess in quarantaine…?
Idea: Woody and Susan could set up a WSUS server and we could subscribe to it!
It seems to me they both have the knowledge to run it, and this way most M$ nasties would not even try to load?
Also, when the DefCon changes, they would flip the updates to on at the same time 
You learn something new everyday…
If you are diligent and delete the updateassistantv2 directory and the included updateassistant.exe and subsequently run SFC /scannow , guess what gets put back in your windows directory?
What I would try :
Also works with malware to prevent run on boot stuff from running with Admin rights, giving you time to delete it. If the system cannot read it, Goodbye!
Martin
What I would try :
- Delete the files but leave the directory in place
- Remove all rights but mine on the (now empty) directory.
- Enjoy!
Also works with malware to prevent run on boot stuff from running with Admin rights, giving you time to delete it. If the system cannot read it, Goodbye! Martin
I don’t understand. Please elaborate. What “Also works with malware”?
In many cases, malware runs using some system level rights. Removing those rights from the folder prevents the system to access the malware, thus preventing it from running on boot. After removing the rights, kill the malware processes, check the rights again, fix as needed, reboot. Then you can delete the malware. Or the Update Assistant!
I don’t know, I don’t run Windows 10 often, I still hang on to Windows 7 for my machines!
With all the malware-like behaviour of Microsoft since the release of Windows 10, the trust is broken and I consider everything Windows 10 malware with a built-in OS.
Thankfully, the Lenovo machine I earned had support for Windows 7, which was quickly installed. Windows 10 is dormant on another partition.
Martin
Another twist to the Windows 10 update fiascos, I develop music software and 40% of my customers are on Windows, so I have a dual boot MacPro so I can run windows. Windows 10 went and auto updated itself until it would no longer boot. I phone Micro$oft tech support to help, they told me it as an Apple issue and wouldn’t help me.
After two days of pain re-installing my entire operating system and software development tools and environment I have learned the hard way to never run windows unatended, and only ever use a wired network connection so I can quickly pull the cable out, like I had to do today, when I notice Windows trying to update itself even though I have told it not to. My machine has booted and run fine every day since blocking updates.
Dual boot is a bad idea nowadays, partly indeed because of those pesky pushed updates. Better run Windows in VMWare or something similar as a virtual machine. Has the extra advantage that you can easily make regular backups. If something goes wrong, just copy the earlier VM back and you’re back in business. Much better then trusting Microsoft with their chaotic OS. And btw, don’t worry about impact on performance. A virtual machine nowadays is similar in speed as running it on real hardware. Virtualization also gives you a good protection against Windows-malware etc. If it goes wrong in that area -once again – copy back a clean VM of an earlier date. Piece of cake.
Make sure that you keep a backup copy of your VM on external media (i.e. not connected to your PC/Mac). I’ve read about malware that specifically corrupts virtual machines.
Anecdotally, my W10 Pro 1703 VM has run flawlessly since I totally isolated it from our network.
-lehnerus2000
Yup! Microsoft has been particularly aggressive in overriding disabled WU this past week. I check it every morning, and have had to override the override, restoring the ‘disabled’ setting three times. Because I’ve also then deleted the relevant files from Windows/Software Distribution each time, I’ve avoided the worst and, miraculously, my Windows (because I’ve left the logs in place) now thinks I’m up to date! As for blaming Apple, or next door’s dog or anyone except themselves, this is MS’s standard answer now. The’ve blown their old basic marketing policy of being compatible with most hardware to bits.
I’ve disabled Windows Orchastrator Service which manages the updates. We’ll see how long before MS circumvents that, too. 
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Notifications
