Ask Slashdot: Make Windows Update Install Only Security Updates Automatically? 288
An anonymous reader writes: After the news earlier this month about Microsoft forcing the Windows 10 upgrade on people who don't want it, my sizeable extended family has been coming to me for a solution. They don't want to be guinea pigs this early in the Windows 10 release cycle, but it looks like Microsoft may not be giving them a choice. My reading of Woody Leonhard's advice is that the only way to ensure the upgrade doesn't happen is to disable Windows Update, but that seems extreme. I want my family to install security updates, but I don't relish the idea of explaining to them how to install just those and hide the less-desireable updates.
The ideal solution would be to have only security updates install automatically, but it looks like it's easier said than done. I've looked at third-party tools like Autopatcher and Portable Update, but a security-only option doesn't seem to be very standard. From what I've read, Microsoft doesn't even package security updates separately, sometimes mixing merely Important and Recommended updates in the downloaded CAB file. I wish I could get them off Windows, but it's not an option. They use Windows at work or school, and don't want to go through the process of learning another OS. Maybe the current situation with Windows 10 will convince them eventually, but they need something now. I would really like to come up with a solution before the next Patch Tuesday on October 13. Do any of the more knowledgeable Slashdotters out there have any advice?
The ideal solution would be to have only security updates install automatically, but it looks like it's easier said than done. I've looked at third-party tools like Autopatcher and Portable Update, but a security-only option doesn't seem to be very standard. From what I've read, Microsoft doesn't even package security updates separately, sometimes mixing merely Important and Recommended updates in the downloaded CAB file. I wish I could get them off Windows, but it's not an option. They use Windows at work or school, and don't want to go through the process of learning another OS. Maybe the current situation with Windows 10 will convince them eventually, but they need something now. I would really like to come up with a solution before the next Patch Tuesday on October 13. Do any of the more knowledgeable Slashdotters out there have any advice?
Fail idea (Score:5, Insightful)
If any number of people did this, then Microsoft would just push a "security" update that offered you Windows 10 or installed spying on the basis that they could somehow offer you more security. "KB6666666 - improve security by making windows phone home at every opportunity"
Re: (Score:3)
Isnt this what they did for the notification anyway?
Re: (Score:2)
Isnt this what they did for the notification anyway?
I don't remember, because I have long had a habit of just installing all the updates. The only reason I didn't have them set to install automagically is that I didn't want them downloading when I was trying to use my connection. Now, of course, I read the descriptions.
Re: Fail idea (Score:5, Informative)
Now, of course, I read the descriptions.
Don't worry, Microsoft has a solution for that: with Windows 10, they simply don't offer descriptions [arstechnica.com]. They've also started bundling feature updates and security updates into single patches. Probably. From what people have been able to determine that existing patches do.
There's no reason they can't decide to start doing that for all updates. Will KB414140 force you to install Windows 10? Include telemetry? Fix a zero-day exploit that's being actively exploited? All of the above? Who knows!
Re: (Score:2)
There's no reason they can't decide to start doing that for all updates.
There might be. For instance. Microsoft might have contractual obligations to release those patch descriptions publicly for Windows 7. They've kept whole operating systems going past EoL to handle government contracts before.
Re: (Score:3)
There's no reason they can't decide to start doing that for all updates.
There might be. For instance. Microsoft might have contractual obligations to release those patch descriptions publicly for Windows 7. They've kept whole operating systems going past EoL to handle government contracts before.
As far as I know, the US Navy is still paying $9,000,000 a year for XP support, but that is set to end in June of 2017.
XP Point of Sale systems support also ends in 2017.
Re: (Score:3)
Why would a contract to provide extended service (no doubt for a hefty fee) to party Y oblige you to provide it to party Z?
Re: (Score:2)
Why would a contract to provide extended service (no doubt for a hefty fee) to party Y oblige you to provide it to party Z?
There are multiple reasons to want the patch to be publicly available. One of them is just to reduce the PITA factor.
Re: Fail idea (Score:5, Interesting)
They already do this by offering totally meaningless descriptions. Reading descriptions does no good when they contain no actual information.
Re: (Score:2)
Most of the descriptions I have bothered looking at have language in it describing the type of security blunder- i.e execute code remotely- and a link to a more thorough explanation.
Did this change with windows 10?
Re: (Score:3)
Re: (Score:3)
Isnt this what they did for the notification anyway?
Almost but it wasn't a security patch.
I was going to suggest Debian GNU/Linux. (Score:2, Insightful)
I was going to suggest Debian GNU/Linux as an alternative OS, but then I remembered how I was treated like a filthy guinea pig when Debian decided to transition to systemd. When I upgraded my Debian testing (which, contrary to its name, has little to do with testing and has historically been far more stable than even the stable releases of other Linux distros) workstation and systemd was unexpectedly installed, everything went to hell. My workstation wouldn't boot, the error logging was all fucked up, and a
Re:I was going to suggest Debian GNU/Linux. (Score:5, Insightful)
Knowing how frustrating it can be when an operating system provider ends up trashing an existing installation through what should be routine updates, I realized that I could not possibly recommend Debian. Perhaps the submitter could do what I did: switch to FreeBSD.
Well, there's also switching to Linux Mint, which is what I suggest at this time. I'll probably keep advocating that at least up until they decide what to do about systemd in the long term. Hopefully, longer.
FreeBSD has shown itself to be the future.
It's not even the present if you want a decent nVidia driver or if you want to run vmware, which I still use to handle some cases that make KVM shit itself. Other than that, I have nothing against it, but that's enough to make it a show-stopper for me. Linux also runs on more hardware, and I prefer to have more or less one OS on everything for my convenience. My router runs Linux, my NAS runs Linux, my desktop (not the gaming one, but anyway) runs Linux, my handhelds even run Linux, albeit a kind of wacky version thereof. Oh yeah, got a fire stick coming, that runs Linux. All my game consoles with ethernet ports run Linux when I want them to, except for the 360... which I am probably about to donate to someone who lost all their shit in the recent fires. Guess I should put the screws back in it just in case they ever drop it.
Re: (Score:3)
nVidia do provide a FreeBSD driver. (I wish AMD did the same, since the xorg drivers are currently not supporting the latest cards.)
Re: (Score:3)
nVidia do provide a FreeBSD driver.
When Ubuntu and Debian went systemd I looked into FreeBSD and found that the FreeBSD driver lags considerably and generally doesn't work as well as the Linux driver. So I decided to stick with Linux for my desktop Unix needs. I may explore FreeBSD for headless servers in the future, but I have a Debian system with systemd pinned away which is still working OK for me.
Re: (Score:2)
The first paragraph is a fallacious appeal to antiquity. Those 'old school' desktops are what allow people to create the content for those idiot consumption devices you love so much. Btw, 'multiple core design' was a thing long before social media and smartphones.
The second lacks examples. 'Social media' is hardly an enterprise solution for mail, and it comes with a boatload of negatives regarding privacy and security. Sure, email is not usually crypted, but at least the server is under local control and
Re: (Score:2)
it may have had the slight advantage of not being developed by a narcissistic aspie kraut wanker with a reputation for never finishing things before chucking them over the wall and getting out the next toy..
Re:Fail idea (Score:5, Insightful)
It's time to start asking the question about "security" updates - is it for you or for Microsoft they improve the security?
Security from Who? (Score:2, Informative)
Re: (Score:3)
So, in other words, because you're incompetent at Windows, Trabant, and 1960s VW Beetle.
Sorry Friend (Score:4, Insightful)
But any way I know of of blocking any updates blocks all of them. like pulling the cable or disabling wifi.
Sorry, but you're screwed (Score:5, Insightful)
You'll get what Microsoft wants and like it, or not - they don't care about your preferences anymore.
If you want to send them a message, stop buying their software. This is a less painful option than it used to be, believe it or not.
Re:Sorry, but you're screwed (Score:5, Informative)
You'll get what Microsoft wants and like it, or not - they don't care about your preferences anymore.
If you want to send them a message, stop buying their software. This is a less painful option than it used to be, believe it or not.
--
Not only stop buying, but STOP USING their software.. The reason Windows 10 is free is because YOU ARE THE PRODUCT that MS is *selling* to
anybody with the right # of $, plus I have to imagine they're in tight with the NSA, since the NSA needs to fill that giant datacenter in Utah, and what better
data than EVERYTHING you type, say and see on the computer that *used* to be YOURS and now belongs to MS.. Its a proven fact that 10 keylogs and captures large quantities of video/audio from any microphones/cameras on said system.. I used/admin'ed Windows for over 25 years (1991-2010) and when I retired I swore I'd quit using MS products and stay on Linux. It pains me to see how Americans have become nothing but lemmings running full-tilt off the cliff when it comes to computers... I have no fear either, that *if* enough of us non-lemmings skip sucking on MS's tit, and instead use of the many Linux/BSD distros, it won't be long before we're branded terrorists by this "government".... Hope I'm dead and buried by then (65 now..)
Re: (Score:2)
Forgot to say "AND FORWARDS IT TO MS".... Wish the FUCK /. would get an "edit-comment" thingie...
Re: (Score:2)
Re: Sorry, but you're screwed (Score:3)
Bro, you also forgot to change MS to M$!
Re: (Score:3)
LOL
Re: (Score:3, Interesting)
Re: Sorry, but you're screwed (Score:2, Informative)
Patently false. It is free for one year to those who validly bought Win 7/8. It reatails for $119/$199 for Home or Pro if you need a fresh license.
Re: (Score:2, Informative)
Server and SCCM? (Score:3, Interesting)
run and hide (Score:5, Interesting)
Unless you wish to become the IT department for your sizeable extended family, don't touch this. The moment you take over patch management is the moment that others (Microsoft, Geek Squad, MS Fixit, etc.) cease being able to fix minor problems when their PCs go goofy.
If you do want to become the IT department, look into Microsoft's Enterprise solutions. They continue to allow personalized patch management there.
Windows 7 EOL is coming soon (Score:4, Informative)
But, as Scar told the mouse, "Life isn't fair, is it?".
Re:Windows 7 EOL is coming soon (Score:5, Informative)
That Win7 EOL is "coming soon" is a pretty good exaggeration. Very soon now Ubuntu 15.10 is being released, you'll have 16.04 LTS, 16.10, 17.04, 17.10, 18.04 LTS, 18.10, 19.04, 19.10 and 20.04 LTS before Win7 expires. Ten distro versions and three long time support releases later, a lot could change between now and then. I switched to Linux back in early 2007 because Vista was terrible but returned to Win7 in late 2010 mainly because of gaming. And I do have a laptop upgraded to Win10, unlike Vista it's not a bad OS except it comes with too many bundled privacy invasions. The OS is stable, the drivers work, IO handling seems faster, technically I haven't found any reason not to upgrade.except the anti-features.
Re:Windows 7 EOL is coming soon (Score:4, Insightful)
According to microsoft policies [microsoft.com] Windows 7 is already out of mainline support. It will have extended support till 2020. But according to its own policies, win7 should be getting only security updates, no "improvements" nor "enhancements". So in a just and fair world, you should get only critical security updates alone for Windows 7.
But, as Scar told the mouse, "Life isn't fair, is it?".
WHO THE FUCK CARES if it gets no "improvements" nor "enhancements"... 7 was the last tolerable Window s version, and if you can keep that insidious "telemetry" crap off of it, it should be good for the next 5 years or so, if for *some* reason you HAVE to stay on Windows...
Re: (Score:2)
Sounds great to me. I don't need any improvements or enhancements. Nice to know I can keep Windows 7 around for another 5 years. After that maybe Wine will be good enough to run the few windows apps I might want to use. Or ReactOS. ;)
Re: (Score:2)
That's alright. My Windows 7 is running fine and I am definitely not looking for anything else than security updates.
Threat Model Failure (Score:4, Interesting)
Now in Windows 10, with no indication of what a given update may contain or do it opens the door to just about anything on those machines. Somehow this makes me think of the recent unpleasantness that Volkswagen has unleashed upon itself. Just trust me to do the right thing. I am not a great admirer of Regan, either as an actor or politician, but one thing he said was on the mark. "Trust but verify."
Re:Threat Model Failure (Score:4, Interesting)
I am not a great admirer of Regan, either as an actor or politician, but one thing he said was on the mark. "Trust but verify."
Although, according to Wikipedia, Trust but verify [wikipedia.org] was originally a Russian proverb taught to Regan by an adviser:
Suzanne Massie, a writer on Russia, met with President Ronald Reagan many times between 1984 and 1987.[1] She taught him the Russian proverb, "doveryai no proveryai" (trust, but verify) advising him that "The Russians like to talk in proverbs.
Re: (Score:2)
Re: (Score:2)
Also, this will most likely extend the life of Windows 7. If people disable updates, then who is going to care when Microsoft stops providing new updates? Updates will be disables anyway.
Re: (Score:2)
Do you think individuals should be doing their own emissions tests on their cars?
Depends. Before getting my car to the inspection, I measure the CO level and adjust it so it is below the allowed maximum. I guess with newer cars you do not need to do that, they adjust themselves automatically (well, most of the time, anyway).
Downloading != Installing (Score:4, Interesting)
So, do not spread wrong rumours, pretty please. I have not heard of anybody installing Windows 10 without his/her consent.
Re:Downloading != Installing (Score:5, Interesting)
Re: (Score:2)
You have too much faith in Microsoft software being infallible.
I'm pretty sure *no one* thinks this. :-)
Re: (Score:2)
Unfortunately many users just click on the ok button, or whatever button they think will make the dialog box go away. They are more intent on consuming the content then on what is actually happening on their system. My wife is a perfect example; despite years of my trying to get her to ask about dialog boxes that pop up that she doesn't understand, she still just clicks ok and moves on. Sometimes she'll comment about why does this keep happening, but generally she just wants her Faceballs access to continue
Install Linux (Score:5, Interesting)
Of course, you don't have to install Linux. Maybe some people would be happier with Apple. You run into a lot of the same problems with them -- Apple looks out for Apple. I got tired of beating my head against my computer to make it work in the mid 2000s and ran Apple hardware for nearly a decade. You plug their shit in, it just works. It's tempting. But even more than Microsoft, their software thinks it knows how you should be working and it's difficult or impossible to do anything differently. You start banging your head against your computer again, and at least with Linux when you do that, you damn well can make the system do what you want it to. Apple's gaming scene when I was using them was only marginally better than Linux's -- you could make a couple of big MMOs and some decade-old games work with their systems.
You could also go with FreeBSD. I don't know a lot about them, but with the whole systemd debacle, a lot of people are moving in that direction now. I'd have to set it up and run it for a while before I could recommend it to relatives.
So that pretty much leaves me with Linux. If you're moving away from Microsoft because you don't like their agenda, you probably don't want a commercial distribution of Linux, either. Find one with an active community that has politics you like and go with them. Or just decide that maybe you can put up with Microsoft's bullshit after all. That's your choice, right there, and you should be able to talk intelligently with your relatives about it.
You don't have to stay there once you make that move, either. I've just about eliminated all the Apple stuff I had going on -- my old Core 2 Duo Macbook is running Linux and my destop dual boots windows and Linux. I'm still booting back to Windows for the games collection and because getting files off my Android phone is easier with Windows. I prefer Kdenlive in Linux for editing my GoPro videos, but I mostly just clip a bit off the front and back of the video and tweak the contrast and sharpening.
The point is that for all these things you always have that choice. Live with your current vendor's bullshit or find some vendor whose bullshit you can tolerate.
Re: (Score:3)
NO KIDDING!! I'm a retired Linux/Windows admin, and I run a tiny local business doing "Windows Janitorial Services" and "upgrading" systems to Linux. The "company" is me and two other guys I knew from my last company prior to retirement. I started the "Linux upgrade" thing with several neighbors who had gotten their older XP systems munged up with a large amount of malware, and had no recovery disks. I gave them a choice: Linux or a new system, as I didnt think they'd appreciate a bll for umpteen hours of c
Re: (Score:2)
What kind of business does this sort of ultra low volume and has three staff members?
Nokia, Blackberry?
Re: (Score:2)
I'm still booting back to Windows for the games collection and because getting files off my Android phone is easier with Windows.
I use ES File Explorer on my Android devices, it has pretty good network file share support. Some Android distributions can also be twiddled to mount smbfs and nfs directly. And finally, you can also just run a samba server on Android.
Re: (Score:2)
Hilarious, ES File Explorer - not open sourced, China based, probably never considered the permissions it uses,
Ever considered AppOpsExposed? Also, I don't keep secrets on my phone, or in Chrome, etc.
Re: (Score:2)
Sadly, this isn't always an option. For users who's only use of a computer is watching cat videos, doing email, etc., sure this option is a good one. But some of us have Windows forced down our throats due to applications we are required to run. I'm a marine electrician and virtually all of the diagnostic and configuration tools that various vendors provide require Windows. As a side line I do vinyl graphics work and the only reliable and realistic solutions run on Windows. I'll admit that I haven't tried W
Re: (Score:2)
The slashdot knee-jerk response is "Install Linux". But it might actually be time to have that conversation.
The time to have that conversation was back when Windows ME was launched, or even Windows XP.
We are way, way past that point now. For all the "OMG M$ is the evilz!" nonsense, Windows 10 is one of the nicest Windows launches they have had. It takes much of what was great about 7 and combines the improvements from 8 and puts them together.
Linux might have had a chance 15 years ago to take a decent share of the desktop market. That ship has sailed...
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Huh (Score:2)
First, if they are moving from 7 to 10 they are learning a new OS, and if they are on Win8 they have already been under the auto update yoke.
Second, they are more likely locked into a program rather than a OS, consider what it is they have to run on Windows, is there an equivalent in Linux?
If so, the "learn a new OS" complaint (while valid) isn't as hard as they might think these days, there is a sort of "start button" and there is a menu and it should not be that difficult.
The main thing I would stress, if
Re: (Score:2)
First, if they are moving from 7 to 10 they are learning a new OS
In what world? For the basic user very little at all has changed between 7 and 10. The interface looks a tiny bit different, "All Programs" is now called "All Apps" in the start menu but otherwise there's absolutely nothing about windows 10 that needs "learning".
Windows 8 needed learning but they've backed off from that interface.
They need educatiing... (Score:4, Informative)
What do they think moving to Win 10 will be like?
Move them to Linux Mint Cinnamon, that's more like what they are used to than any of Win 7, Win 8, or Win 10.
As easy as pie. (Score:3, Interesting)
What do they think moving to Win 10 will be like?
A piece of cake?
In Steam's August Hardware and Software Survey,16% of Steam gamers were running 64 Bit Win 10, a bare 0.92% Linux. Steam Hardware and Software Survey: August 2015 [steampowered.com]
Worldwide usage of Windows 10 in its first calendar month (August) was 4.9% compared to 1% for Windows 8 and 4.1% for Windows 7 after their first complete month.
Windows 10 first month worldwide usage well ahead of that recorded by Windows 8 [statcounter.com]
Too bad, so sad. (Score:2)
I've taken that hardline approach for years and flat out refuse to help by saying, in essence, "I don't use it, I don't know it."
Re: (Score:2)
Being a retired admin, THAT is my advice to all who ask... Get the F**K OFF WINDOWS!! Linux is NOT hard....
Re: (Score:2)
Yup.
I treat Apple products just like this. You chose to buy that stuff, if you asked me I would have told you not to, I could supply enough reasons to justify that claim, but yet you still went down that path.
When I was self-employed, my mantra was "I charge prices relative to the amount of my advice that you ignored, and the amount of stupidity you deployed". It tended to work. When people made bad decisions, I charged a lot more for the cleanup and they learned not to make bad decisions (or to fix it t
I'm perfectely happy with Windows 7 (Score:2)
As far as Windows goes I am happy to tolerate it for the games that I play that do not have a Linux port yet. So there is no way in hell I am upgrading to 8 or 10.
Using this: https://msdn.microsoft.com/en-... [microsoft.com]
I am fairly confident that those fuckers can't force something onto me I don't want (especially since I compiled it with TDM-gcc
C:\Users\Pyshcotria\Code> checkversion.exe
Windows10YoureFuckedOrGreater
C:\Users\Pyshcotria\Code>
Seems fine
You want to use Windows in a manner that... (Score:2)
Zorin OS for Windows users (Score:5, Informative)
Are security updates really necessary? (Score:2)
I found throughout the decades that the best computer security is provided by using common sense and being informed on things related to computers. While security updates are mandatory for most people (I guess), I think there are people who can get by just using their knowledge of IT and common sense. In any case, this has worked for me my whole 40+ years long life, more than half of it involved with computer tech.
Corp version? (Score:2)
Can't you pick and choose updates with the corp version? Only home edition forces them on you.
Re:Corp version? (Score:4, Informative)
Can't you pick and choose updates with the corp version? Only home edition forces them on you.
You can pick and choose updates in the home version, too. By default, you get all updates, including recommended ones. But you can tell it to just notify you and not download or install updates. Then you can run windows update manually, and click on each patch, then click the link for more info, then read about it in your web browser. If you don't want an update, you can hide it in windows update, and it will no longer appear and you will no longer be nagged to install it. All very straightforward, except that useful patch descriptions aren't actually given in the windows update app, you have to keep going to the browser. And microsoft will no longer give you that information without enabling javascript for their domain, their basic site functionality now requires javascript, either because they want to run malicious code on your PC or because they are completely incompetent and forgot how to put content into a webpage without javascript, take your pick.
Re: (Score:2)
DisableGWX (Score:3, Insightful)
First off, If there's no reason not to upgrade other than FUD, then they should update. 7 only has a little more than 4 years left and is already in extended support and windows 8/8.1 interface is crap vs 10. If they're worried about being spied on stay with a Local account and don't setup a Microsoft account. It will only take the same telemetry that they've been doing since the customer experience program in vista, which you can then turn off. That being said MS shouldn't have started downloading the OS on PC's without explicit reservations but even that can be disabled.
Easiest method to disable windows 10 from updating is to use the DisableGWX Policy setting. This site's Method 3 [askvg.com] will walk you through setting the registry key. Microsoft [microsoft.com] Also has some other blocking methods as well.
If you just want security patches from that point forward go to windows update settings and uncheck "give me Recommended updates the same way I receive important updates"
Re:DisableGWX (Score:5, Insightful)
First off, If there's no reason not to upgrade other than FUD,
Look, shill, Microsoft actively spying on users isn't FUD. It's not a fear, because they're doing it. It's not uncertainty, because they're doing it. And it's not doubt, because they're doing it.
Easiest method to disable windows 10 from updating is to use the DisableGWX Policy setting
That is not the question, which the summary makes obvious, since the poster mentioned Windows 10 attempting to install itself. Clearly they want to avoid Windows 10.
If you just want security patches from that point forward go to windows update settings and uncheck "give me Recommended updates the same way I receive important updates"
The problem, as I pointed out in the top comment in this thread, is that you cannot trust Microsoft not to put other things into "Security Updates". This is especially true on Windows 10 where they are providing less information about what is actually in patches than literally ever before, as pointed out by a comment in that part of this thread. So no, that doesn't work.
Re: (Score:2)
First off, If there's no reason not to upgrade other than FUD,
FUD? ARS Technica is not known for publishing FUD. [arstechnica.com]
And here's a nice traffic analysis of what Windows 10 sends to Microsoft in its IP packets. [aeronet.cz]
WSUSOffline (Score:2)
Re: (Score:3)
Have a look at WSUS Offline. It does more or less what you're asking for, although you do have to run the collector and client manually every post patch Tuesday.
No, there is no more patch Tuesday [computing.co.uk]. And also no, because you cannot trust Microsoft not to put spying or Windows 10 "upgrading" into a security patch.
I am Windoze free at last! (Score:2)
Have had it since WFW 3.11 in '95 and survived the many flavors of Winders so I could play games although I dual-booted with OS/2 then Linux. Steam has enough games to keep me busy for a long time. Bye bye M$!
something easy (Score:2)
Microsoft already has a solution for this... (Score:3)
CB (Current Branch) is the same as what the home users have to deal with.
LTSB (Long Term Service Branch) however does things differently.
"For example, systems powering hospital emergency rooms, air traffic control towers, financial trading systems, factory floors, just to name a few, may need very strict change management policies, for prolonged periods of time. To support Windows 10 devices in these mission critical customer environments we will provide Long Term Servicing branches at the appropriate time intervals. On these branches, customer devices will receive the level of enterprise support expected for the mission critical systems, keeping systems more secure with the latest security and critical updates, while minimizing change by not delivering new features for the duration of mainstream (five years) and extended support (five years)."
Source: Windows 10 for Enterprise: More secure and up to date
https://blogs.windows.com/busi... [windows.com]
The only other solution I can think of would rely on setting up a WSUS server, and managing the updates from there. The OP would then just need to change some registry settings on his family's computers to point to his WSUS server for updates.
Instructions: Configure Automatic Updates using Registry Editor
https://technet.microsoft.com/... [microsoft.com]
Just do it. (Score:2)
Hi. I'm mostly a Mac and Linux guy, but I have a Windows box I use for gaming. Windows 10 is a fine product: it's a nice extension of the Windows 7 experience, with better security, good speed, and some nice features. As you say you're not going to be able to get your family off Windows, they should be running 10, with all the updates. Trying to stick with 7 (or god forbid, XP), they'll have more incompatibility issues going forward rather than less, and picking and choosing Windows updates is more trou
How to disable GWX and Telemetry (Score:5, Informative)
The three registry keys to disable GWX and the GWX advert in Windows Update are these...
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX]
"DisableGwx"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade]
"ReservationsAllowed"=dword:00000000
Then open an elevated command prompt (search for cmd in the start menu, right click and Run as Administrator) and uninstall the following telemetry KBs...
wusa /uninstall /kb:3068708 /norestart /uninstall /kb:3022345 /norestart /uninstall /kb:3075249 /norestart /uninstall /kb:3080149 /norestart
wusa
wusa
wusa
In Control Panel > Windows Update > Change Settings, untick "Give me recommended updates the same way as I receive important updates" as some optional updates have been used to send down unwanted GWX/Telemetry updates.
Also in Control Panel > Windows Update, search for updates, then view the optional ones, then hide three of those KBs above (3022345 shouldn't appear as it's superseded) by right-clicking on them and choosing the hide option.
Now reboot the computer, search for CEIP in the start menu, run it, and change the setting to disable telemetry to MS.
If the C:\$WINDOWS.~BT then your computer is downloading Windows 10 in the background. Search for CleanMgr in the start menu and run it to remove the "Windows Update temporary files" category. Although that may unhide those three KBs above and you many need to rehide them.
Telemetry info from http://www.ghacks.net/2015/08/28/microsoft-intensifies-data-collection-on-windows-7-and-8-systems/ [ghacks.net]
Unless MS send a recommended update which adds more GWX or Telemetry stuff to Windows 7/8, your extended family's computers will look after themselves from now on.
They have lied before... (Score:2)
I believe that, in the past, Microsoft lied about certain updates as to whether they were vital security updates or not,
They could just as easily lie in the future and force down something that helps them keep a better eye on us but label it as vital security.
Any non-IT person would normally be well advised to have the system automatically install security updates. Those of us who are may have to trust MS as our particular area of expertise does not include what "this" update is supposed to fix. Does eve
Not happy with 10 (Score:2)
I installed 10 on a laptop. When setting up it gives an option to opt out of auto update. But... auto updates anyway. What scares me is that I learned long ago not to install most optional updates. Video drivers usually don't work. Lan drivers usually don't work. For the lan, you have to dig out the mobo software and reinstall it. Then get on line to get video drivers. Not fun.
As far as the 8 metro screen. How is it, after all this time, no one seems to know how or even that you can shut it off. I didn't li
Use Enterprise version (Score:2, Informative)
If staying on Windows is a must, simply get the Enterprise version. It allows to manage the updates the updates the way it was in Windows 7.
FYI: List of Win10/Telemetry updates (Score:3)
Just an FYI, as this is a Windows update thread which is trying to avoid Win10 nagware + telemetry. These are the updates I've identified so far. Feel free to add/update the list:
KB 2952664
Compatibility update for upgrading Windows 7
https://support.microsoft.com/... [microsoft.com]
KB 2976978
Compatibility update for Windows 8.1 and Windows 8
https://support.microsoft.com/... [microsoft.com]
KB 3022345
Update for customer experience and diagnostic telemetry
https://support.microsoft.com/... [microsoft.com]
KB 3035583
Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
https://support.microsoft.com/... [microsoft.com]
KB 3068708
Update for customer experience and diagnostic telemetry
https://support.microsoft.com/... [microsoft.com]
KB 3075249
Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
https://support.microsoft.com/... [microsoft.com]
KB 3080149
Update for customer experience and diagnostic telemetry
https://support.microsoft.com/... [microsoft.com]
Re: (Score:2)
It's a question without a good answer. There doesn't appear to be a "permanently prevent Windows 10 upgrade" switch anywhere.
This could be a business opportunity. Write a piece of software that automatically finds and suppresses any attempts to update to Windows 10.
Re: (Score:2)
If someone made a tool that lets me use Windows 10 with security updates but without spying or cloud or unwanted upgrades, I would pay for that. I don't see any technical reason why a 3rd party can't provide that. When Windows 8 messed up the start menu, tools like Classic Shell stepped in to fill the gaps, with huge popularity, and I think those download statistics were actuall
Re: (Score:2)
Or CentOS.
Re: (Score:2)
Re: (Score:2)
No. But it does push Windows 8.0 and 8.1 update prompts still. And "security" updates to improve their telemetry on those systems still. And all kinds of junk masquerading as a necessary update.
Honestly, I have to decline more updates than I accept, especially when you include the application updates too.
I don't see the solution to MS forcing an option you don't want and they could easily provide ways for you to exclude as being to use more of their software on more machines.
Re: WSUS (Score:2)
It's basically saying roll your own windows distro.
Re: (Score:2)
Re: (Score:2)
Bull. I update Windows XP just this week. I hacked the registry to make the OS think it's an embedded ATM machine.
Microsoft is still supplying security updates for those machines.
Re: (Score:2)
Did you actually hack the registry or apply a .reg file someone else already figured out
(patched)?
I mean the distinction is about as much as saying you hacked into a website when you deleted the file name in the address bar and was presented with a directory listing verses gaining admin privileges and locking all the registered users out or crediting them as having already paid for another year of access. One is a hack, the other is piss poor administration by the website. can you guess which is which?
Re: (Score:2)
That's what makes it so simple!
Re: (Score:2)
You can still keep XP updated weekly just about.
You just change
[HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady]
"Installed"=dword:00000001
and you will get latest windows updates for XP. By getting the updates the military and atm machines get :P
I have an old fileserver with 8 shared hard drives ive just been too lazy to install anything else on it, as I have 2 linux boxes and a gaming box. plus laptop/tablet.
so I just plugged all my extra hard drives into the xp and shared them all on lan. and run utorrent 2.2.1 the
Re: (Score:2)
...until the next patch that will reinstall it and reactivate everything...
Re: (Score:3)
Re: (Score:2)
Isn't what the settings in the "Windows Update" control panel are for? Have "important updates" install automatically, and don't tick the "recommended updates" check box.
Re: (Score:2)
I prefer to use a computer where it is safe to view porn sites.
You can get owned by a html mail or an advertisment on a trusted website.