In this issue

PATCHING: A Win10 guide for Windows Update settings

BEST OF THE LOUNGE: A reCAPTCHA? Am I signed in?

Additional articles in the PLUS issue

BEST UTILITIES: Freeware Spotlight — ScreenToGif

PATCH WATCH: June updates crash printing

SMALL BUSINESS: Eight ways to grow email lists for small businesses

• Feature update: The large, twice-yearly upgrades that have different Win10 version names — i.e., 1809, 1902, 1909, and 2004.
• Quality update: The monthly security/cumulative patches typically released by Microsoft on the second Tuesday of the month (aka Patch Tuesday).
• Optional updates: Also known as preview updates, these non-security cumulative updates are released between Patch Tuesdays (officially called the C, D, and E weeks, and possibly the next month’s A week). When they’re released is at Microsoft’s whim. These updates are usually a “preview” of the next month’s non-security fixes, and they’re used primarily by IT admins for testing compatibility.
• Servicing stack: This patch updates the Windows-updating mechanism and is typically installed before the cumulative updates.
• Other updates: The above updates are for the operating system. Additional patches released each month include updates for .NET Framework, Adobe Flash, Windows Defender, Internet Explorer, Office, Windows Malicious Software Removal Tool (MSRT), and others.

  They may also include Out-of-band updates, released whenever there is a major patch failure or an imminent threat from malware due to a newly revealed vulnerability in an MS product.

• Check for updates: This is perhaps the most notorious button in Windows 10. Labeling aside, it doesn’t just benignly list available patches — it downloads and installs all updates Microsoft wants to add to your system. As a general rule, never click Check for updates unless you want forthcoming quality patches — and possibly feature updates as well.

  (If updates are Paused, Deferred, or manually hidden, they won’t show up in Windows Update.)

• Pause updates: This option takes effect when you click the Pause updates for 7 days button in Windows Update. Patches can be delayed in seven-day increments for up to 35 days (see Figure 1). Note that the best time to click Pause … is the day before Patch Tuesday — before the updates download to your machine. If you wait until Patch Tuesday, you have to take into account the difference between Redmond time and your local time. Better safe than sorry.

  
  Figure 1. You can click the Pause updates for 7 more days button up to five times to delay patching for a maximum of 35 days.

  Under “Advanced options,” the pull-down item under “Pause updates” lets you manually set the day when a patch should be installed. Remember, when that date arrives, you’ll immediately get the updates. This option is convenient if you want the updates added, say, on the weekend.

  Keep in mind that you’ll have to manually reset the pause period after each patch cycle. Note the date that the pause will end; it’s given under the “Updates paused” banner. Mark that day on your calendar so you’re ready!

• Defer updates: There is a seemingly subtle difference between deferring updates and pausing updates. The deferral period begins when updates are released by Microsoft, and it lasts for the number of days you set — for up to 30 days. Most importantly, this option automatically resets each patch cycle — no user intervention needed. Look for this option under Choose when updates are installed (Windows Update/Advanced options).
• Metered connection: This setting tells Microsoft that you have a relatively low data cap on your Internet connection (even if you really don’t) and overages will cost you extra. In theory, when metered connection is switched on, Windows Update will download only “priority updates” (more info). Look for the “Metered connection” switch in Settings/Network & Internet/Change connection properties (Figure 2).

  
  Figure 2. The metered connection switch can be used to help delay patch installation.

• wushowhide.diagcab: This is a downloadable Windows troubleshooter app (more info) that lets you check for pending updates and hide patches you don’t want to install — for example, new hardware drivers. As with Windows 7 and 8.1, hidden updates will not show up as pending, and they must be “unhidden” before you can install them.

  But using the app with current versions of Windows 10 is tricky. Before you try it, read the AskWoody post How to use wushowhide. The two key steps are to switch on Metered connection and, when you first launch the tool, click “Advanced.” Then uncheck the box to “apply changes automatically.” You also need to have update pausing turned off.

  Note that wushowhide uses the Windows Update Service to search for updates, so it won’t run if the service is disabled. Also, when you hide updates, you may have to clear the Windows Update queue in order to prevent hidden updates from installing. Instructions for clearing the Windows Update queue are found in AskWoody post AKB2000013. Once the queue is cleared, you may have to wait until Windows Update checks for patches to see what’s offered. Do not click “Check for updates.”

• Pause … : Again, you can pause updates for up to 35 days in seven-day increments, and the delay begins when you trigger this option. Each time you click “Pause updates for 7 (more) days,” you should see the resume-updating date (under Updates paused) advance an additional week. Remember: When pausing is active, Windows Update won’t show pending patches (those ready to download or install) — so you’ll not know what’s offered. It’s rather annoying, but there is a solution described below.

  At the end of the pause period, updates will automatically download and install (unless, possibly, you’ve enabled “metered connection”). You can add more seven-day increments at any time while a pause is still active (up to the 35-day maximum).

  You can, of course, end pausing whenever you wish by clicking the Resume updates button.

  For quality updates, we typically recommend pausing updates for at least 14 days (two clicks) and preferably 21 days (three clicks). This should give enough time to see whether offered patches are free of significant problems.

• Advanced updating options: Home editions include the more powerful Pause updates control under Advanced options. As mentioned, this lets Windows Update initiate patching on a specific date that’s convenient for you. (Again, the limit is 35 days.) But you don’t have the ability to automatically defer updates each month via the Choose when updates are installed controls found in the Pro editions.
• Feature and optional updates: If a Download and install now link appears, clicking it might download and install a new version of Win10 or some other optional update. Don’t click it until you’re ready. (Note: if your version of Win10 is nearing its end of life, Microsoft might force an upgrade to a newer version.) If updates are paused, the Download and install now link should not appear.

• Choose when updates are installed: Again, these controls under Windows Update/Advanced options let you have Quality and Feature updates automatically deferred for a set number of days.
• Feature updates These can be put off for up to a year, starting on the day the update was released. It can apply to several feature updates at a time. Say, for example, Version 1903 was released 220 days ago and 1909 was released 30 days ago (obviously, we’re working in the past; the numbers are made up). Setting the deferral to 200 days will make Win10 1903 available to Windows Update — but not 1909. Setting the deferral to 20 days will bypass Version 1903 and install 1909. (See the “Chasing the elusive upgrade for Win10 Pro v1803” post for another example.)

  Deferring 120 or 180 days will usually take you past the “beta-testing guinea pig” stage of a new version. At that point, Microsoft should have a stable OS. (We’re currently in the “public beta” phase for Win10 2004.) Be careful with this setting: if you push out a new version for, say, 365 days, your current Win10 release might run into its end of life before the deferral period expires. Also, keep in mind that feature and optional updates won’t be posted in Windows Update during the deferral period.

• Quality updates can be automatically deferred for up to 30 days. Here, too, the deferral period starts when the updates are released by Microsoft. As with Home editions, we recommend deferring monthly security and cumulative patches for 21 days.
• Group Policy settings: The various advanced updating settings available through gpedit are designed for business environments — not the average PC user. If you use Group Policy settings, options in Windows Update might be grayed out and/or unavailable. (You’ll usually see a message in Windows Update stating: “Some settings are managed by our organization.)

  That said, there is one setting I recommend. See the details below.

Windows 10

Hoping to fix a ThinkPad’s slow and erratic performance, Plus member Davidhs applied Windows’ Refresh option. Normally, that would be a good tactic. But in this instance, the refresh upgraded the machine to the new Windows 2004 — and left it still ailing. Fellow Loungers offer some suggestions — but as is often the case, doing a full restore brought the laptop back to good health. Woody has advised against installing Windows 2004 — for reasons just like this.

NETWORKING

A series of dropped Internet connections made Lounger WStnesler wonder whether a four-year-old NETGEAR N750 router was giving up the ghost. 5GHz Wi-Fi connections worked fine; it was just the 2.4Ghz connections that kept failing. But some devices don’t support the higher bandwidth channels. Wireless issues in densely populated locations become especially thorny. Forum members provide tips on analyzing local Wi-Fi and setting channels.

SECURITY

Shortly after upgrading to Microsoft 365 Business Premium, Plus member Jonathan Handler discovered that his local admin-account password had expired. Why? Jonathan‘s Lounge post prompted numerous helpful replies about setting up local accounts during the initial Windows setup. There are ways to get around Microsoft’s pushy preference for MS accounts.

Windows 10

Plus member WSlavoro was having a problem running chkdsk on a Win10 laptop. The error message “Chkdsk cannot run because the volume is in use by another process” kept popping up. In typical Windows fashion, the message offered the option to run the disk-checking tool on system restart — but didn’t say that a restart was required. Reading between the lines becomes a habit with Windows messages. A simple “You must restart your computer for this process to run. Do it now: Y/N” would make things clearer.

PATCHING

Windows 10 offers various tools for pausing and deferring monthly fixes. Using the less-known wushowhide.diagcab can help with this management task — if you know exactly how to use it. When Plus member mpw asked for help with applying this tool for hiding updates, fellow Loungers obliged with tips, detailed information … and patience.

SOFTWARE

Plus member geekdom posted a list of suggestions for vetting new software that’s not from Microsoft. Forum members offer their opinions and suggestions for the list. Looking for pitfalls before installing any software is always a good idea!

Publisher: AskWoody LLC (woody@askwoody.com); editor: Tracey Capen (editor@askwoody.com).

Trademarks: Microsoft and Windows are registered trademarks of Microsoft Corporation. AskWoody, Windows Secrets Newsletter, WindowsSecrets.com, WinFind, Windows Gizmos, Security Baseline, Perimeter Scan, Wacky Web Week, the Windows Secrets Logo Design (W, S or road, and Star), and the slogan Everything Microsoft Forgot to Mention all are trademarks and service marks of AskWoody LLC. All other marks are the trademarks or service marks of their respective owners.

Your email subscription:

• Subscription help: FreeNewsletter@askwoody.com

Copyright © 2020 AskWoody LLC, All rights reserved.