Slashdot Mirror
Ask Slashdot: Make Windows Update Install Only Security Updates Automatically?
An anonymous reader writes: After the news earlier this month about Microsoft forcing the Windows 10 upgrade on people who don't want it, my sizeable extended family has been coming to me for a solution. They don't want to be guinea pigs this early in the Windows 10 release cycle, but it looks like Microsoft may not be giving them a choice. My reading of Woody Leonhard's advice is that the only way to ensure the upgrade doesn't happen is to disable Windows Update, but that seems extreme. I want my family to install security updates, but I don't relish the idea of explaining to them how to install just those and hide the less-desireable updates.
The ideal solution would be to have only security updates install automatically, but it looks like it's easier said than done. I've looked at third-party tools like Autopatcher and Portable Update, but a security-only option doesn't seem to be very standard. From what I've read, Microsoft doesn't even package security updates separately, sometimes mixing merely Important and Recommended updates in the downloaded CAB file. I wish I could get them off Windows, but it's not an option. They use Windows at work or school, and don't want to go through the process of learning another OS. Maybe the current situation with Windows 10 will convince them eventually, but they need something now. I would really like to come up with a solution before the next Patch Tuesday on October 13. Do any of the more knowledgeable Slashdotters out there have any advice?
The ideal solution would be to have only security updates install automatically, but it looks like it's easier said than done. I've looked at third-party tools like Autopatcher and Portable Update, but a security-only option doesn't seem to be very standard. From what I've read, Microsoft doesn't even package security updates separately, sometimes mixing merely Important and Recommended updates in the downloaded CAB file. I wish I could get them off Windows, but it's not an option. They use Windows at work or school, and don't want to go through the process of learning another OS. Maybe the current situation with Windows 10 will convince them eventually, but they need something now. I would really like to come up with a solution before the next Patch Tuesday on October 13. Do any of the more knowledgeable Slashdotters out there have any advice?
If any number of people did this, then Microsoft would just push a "security" update that offered you Windows 10 or installed spying on the basis that they could somehow offer you more security. "KB6666666 - improve security by making windows phone home at every opportunity"
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Install Ubuntu.
I know of many small companies (up to 10 people) which use this method.
Disable updates on Windows XP, or don't install any Microsoft (or American) software.
But any way I know of of blocking any updates blocks all of them. like pulling the cable or disabling wifi.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
The fantasy was fun while it lasted, but Microsoft has become the enemy. My solution was to disable all updates on the Windows rig (running 7) and turn it into a glorified console. Then I got a mac.
I was going to suggest Debian GNU/Linux as an alternative OS, but then I remembered how I was treated like a filthy guinea pig when Debian decided to transition to systemd. When I upgraded my Debian testing (which, contrary to its name, has little to do with testing and has historically been far more stable than even the stable releases of other Linux distros) workstation and systemd was unexpectedly installed, everything went to hell. My workstation wouldn't boot, the error logging was all fucked up, and all I found when googling for help were many other complaints about various problems from many other victims.
Knowing how frustrating it can be when an operating system provider ends up trashing an existing installation through what should be routine updates, I realized that I could not possibly recommend Debian. Perhaps the submitter could do what I did: switch to FreeBSD. It's a mature, reliable, robust operating system that can still run a wide variety of the software that runs on Linux. Its developers care deeply about not damaging existing installations. FreeBSD has shown itself to be the future.
You'll get what Microsoft wants and like it, or not - they don't care about your preferences anymore.
If you want to send them a message, stop buying their software. This is a less painful option than it used to be, believe it or not.
Left MS Windows for Linux Mint and never looked back!
Vote for Bernie in 2016!
SCCM can push patches whenever the admin feels like it... maybe this would work for you? Although it would require setting up the server somewhere.
Buck Feta. You know what to do.
That's nice that you know someone who did it. It only counts as information, though, if you actually tell us how.
Unless you wish to become the IT department for your sizeable extended family, don't touch this. The moment you take over patch management is the moment that others (Microsoft, Geek Squad, MS Fixit, etc.) cease being able to fix minor problems when their PCs go goofy.
If you do want to become the IT department, look into Microsoft's Enterprise solutions. They continue to allow personalized patch management there.
http://winsupersite.com/windows-10/how-stop-windows-10-upgrade-downloading-your-system
It's a question without a good answer. There doesn't appear to be a "permanently prevent Windows 10 upgrade" switch anywhere.
This could be a business opportunity. Write a piece of software that automatically finds and suppresses any attempts to update to Windows 10.
But, as Scar told the mouse, "Life isn't fair, is it?".
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
The "conventional wisdom" of having automatic updates on is to keep the huge ecosystem of windows desktops and laptops at least reasonably up to date, especially as to security issues, and this has to some extent worked. However, this new policy of trying to cram windows 10 down everyone's throat is beginning to have the opposite effect. Many people I know, myself included, have disabled automatic updates and more will follow. I have been asked many times how to stop upgrading from Windows 7 to Windows 10 and about the only answer I can give is either to turn automatic updates off or switch to Linux. Since few people are willing to move to Linux this change by Microsoft is actually increasing the threat from people using windows platforms.
Now in Windows 10, with no indication of what a given update may contain or do it opens the door to just about anything on those machines. Somehow this makes me think of the recent unpleasantness that Volkswagen has unleashed upon itself. Just trust me to do the right thing. I am not a great admirer of Regan, either as an actor or politician, but one thing he said was on the mark. "Trust but verify."
"My reading of Woody Leonhard's advice is that the only way to ensure the upgrade doesn't happen is to disable Windows Update, but that seems extreme. I want my family to install security updates,"
Well then. Just disable windows update.
And educate them on not running anything from random website.
And anyway if they are mainly using it for email, some video/streaming, libreoffice or whatever, there's no reason for them to have anything weird, don't they?
Let us assume Windows is downloading Windows 10 automatically, even if you did not reserve it. Do you get Windows 10 installed by doing the typical "You need to restart your computer in order to get security updates"? If that is not what happens, then the only thing wrong is downloading 3.5GB worth of unwanted data. It is still wrong, though. I do not think people are installing Windows 10 without ever clicking on YES somewhere. I am sure it is the user's fault if they click. It is always the user's fault if they install unwanted/malware software that was bundled with other software by clicking a YES button.
So, do not spread wrong rumours, pretty please. I have not heard of anybody installing Windows 10 without his/her consent.
Turn off all the services you don't need (Its not as easy anymore since Microsoft stopped documenting dependencies properly after Windows XP but give it a try). Use this semihardened machine for games ony and use another machine running Linux,BSD or OSX for work,banking and anything of importance. Windows is basically a gamingplatrom now so use it for that ONLY. (execpt the games you can get on "non toy" platforms that is.
MS forcing the download is NOT the same thing as forcing the upgrade.
Of course someone could accidentally click Install, but it won't do it automatically.
Second, just go into Windows update and uninstall and hide all the updates you don't want, including the 'Windows 10 Upgrade'. Done.
Now you can forget about it and rest easy.
Of course, you don't have to install Linux. Maybe some people would be happier with Apple. You run into a lot of the same problems with them -- Apple looks out for Apple. I got tired of beating my head against my computer to make it work in the mid 2000s and ran Apple hardware for nearly a decade. You plug their shit in, it just works. It's tempting. But even more than Microsoft, their software thinks it knows how you should be working and it's difficult or impossible to do anything differently. You start banging your head against your computer again, and at least with Linux when you do that, you damn well can make the system do what you want it to. Apple's gaming scene when I was using them was only marginally better than Linux's -- you could make a couple of big MMOs and some decade-old games work with their systems.
You could also go with FreeBSD. I don't know a lot about them, but with the whole systemd debacle, a lot of people are moving in that direction now. I'd have to set it up and run it for a while before I could recommend it to relatives.
So that pretty much leaves me with Linux. If you're moving away from Microsoft because you don't like their agenda, you probably don't want a commercial distribution of Linux, either. Find one with an active community that has politics you like and go with them. Or just decide that maybe you can put up with Microsoft's bullshit after all. That's your choice, right there, and you should be able to talk intelligently with your relatives about it.
You don't have to stay there once you make that move, either. I've just about eliminated all the Apple stuff I had going on -- my old Core 2 Duo Macbook is running Linux and my destop dual boots windows and Linux. I'm still booting back to Windows for the games collection and because getting files off my Android phone is easier with Windows. I prefer Kdenlive in Linux for editing my GoPro videos, but I mostly just clip a bit off the front and back of the video and tweak the contrast and sharpening.
The point is that for all these things you always have that choice. Live with your current vendor's bullshit or find some vendor whose bullshit you can tolerate.
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
So, in other words - they are lazy. Sorry, I have no sympathy for them - if they're not willing to learn, just take their computer away. They're asking you to do something you can't, and probably shouldn't waste your time bothering to. They can't be bothered to learn how to use a secure OS, so why are you trying to bend time and space around to make them happy? Show them how to use Linux Mint, it's NOT that hard - their heads won't explode. And if they continue to complain that they "don't get it, and want windows back", do yourself a favour and hand them the install CD and walk away... Sometimes you need to just let people deal with their own computer problems. We all know for a fact that Microsoft will not be going out of their way to make you and your family happy, so get a different product.
First, if they are moving from 7 to 10 they are learning a new OS, and if they are on Win8 they have already been under the auto update yoke.
Second, they are more likely locked into a program rather than a OS, consider what it is they have to run on Windows, is there an equivalent in Linux?
If so, the "learn a new OS" complaint (while valid) isn't as hard as they might think these days, there is a sort of "start button" and there is a menu and it should not be that difficult.
The main thing I would stress, if they are on Win 7, is why update? Does it do what you want? Then leave it be and in time there will be a solution offered to make win10 more palatable for them.
Too many people got caught up in the "free upgrade" and I already hear complaints on the gaming servers, lots of regret there and very few "it's better stories".
The whole Win10 thing seems like MS making it easier for themselves while beating up and robbing their customers (of personal data).
"If any question why we died, Tell them because our fathers lied."
L.S. (also Hands Off!) is a small utility program that runs on Mac OS. It can prevent anything on your Mac from 'phoning home', even itself. No more annoyances of software auto-updating to bring you the latest adware or otherwise crippled updates. You can run Adobe, Apple and Microsoft software without their constant reports about your activities. It can prevent the many parts of OS-X from connecting to Apple's scores of internet resources ... Ah, but do you know what those BSD/OS parts are doing and why they are connecting? Not likely, so it may be best to let the operating system just do its thing.
...omphaloskepsis often...
They "don't want to go through the process of learning another OS".
What do they think moving to Win 10 will be like?
Move them to Linux Mint Cinnamon, that's more like what they are used to than any of Win 7, Win 8, or Win 10.
"Cock Up Your Beaver" does not mean what you think. This sig is intended to clog filters and annoy do-gooders
If they come to you for advice and that advice is to ditch Windows, then you are not obligated to help them with support.
I've taken that hardline approach for years and flat out refuse to help by saying, in essence, "I don't use it, I don't know it."
Trolling is a art,
As far as Windows goes I am happy to tolerate it for the games that I play that do not have a Linux port yet. So there is no way in hell I am upgrading to 8 or 10.
Using this: https://msdn.microsoft.com/en-...
I am fairly confident that those fuckers can't force something onto me I don't want (especially since I compiled it with TDM-gcc
C:\Users\Pyshcotria\Code> checkversion.exe
Windows10YoureFuckedOrGreater
C:\Users\Pyshcotria\Code>
Seems fine
But isn't systemd a forced update that fixes problems that didnt exist, and introduces a new set of operational challenges?
What I did was to uninstall the update that pushes the Windows 10 notification, can't recall which KB it was, but you'll find it.
Then I found out that Microsoft pushed the spying software of Windows 10 through updates to Windows 7 and Windows 8 too.
Forbes had a simple guide to how you get rid of them.
Doesn't prevent Microsoft form putting out new updates that pushed Windows 10 or spies on you.
... Microsoft does not want you to use Windows. ... FAIL
"Zorin OS is a multi-functional operating system designed specifically for Windows users who want to have easy and smooth access to Linux."
We have several Win7. We created a domain with server 2012. We keep the server off most of the time. We get updates through windows updates, however Ms doesn't push win10 to it's corporate (DOMAINED) customers.
Hope that helps!
I found throughout the decades that the best computer security is provided by using common sense and being informed on things related to computers. While security updates are mandatory for most people (I guess), I think there are people who can get by just using their knowledge of IT and common sense. In any case, this has worked for me my whole 40+ years long life, more than half of it involved with computer tech.
"The agriculture ministry is not in charge of Gundam" - Japanese ministry official.
So we are going back to the win2000 era? Doing a 15-year-step back?
Its like being in the early days of win update, where like every other update bricked your PC - the only solution was to completely turn off winupdate.
M$ forcing ppl to some shit. ppl disable shit and in the long term ppl suffer, because some of the big pile of shit was actually a little useful and now they run a vuln machine and do not care.
Can't you pick and choose updates with the corp version? Only home edition forces them on you.
Only the State obtains its revenue by coercion. - Murray Rothbard
Windows 10 as released in June 2015 wasn't complete. They were probably trying to rush it out for back to school or some other milestone date because their original launch period was fall. They're adding missing features and fixing broken features that shipped with RTM code. Windows is never "done" - they always refine shipped features, add security updates, and add new features as the tech market develops over time, but 10 didn't even meet the "done" of past releases. MS would figure out what features to add to the OS and work on it until all those features were in; maybe not perfect but, all there. Win 10 didn't even match that, where the missing features are being released at the end of the year in a "Threshold 2" update. And those TH2 features will probably be half-baked too, requiring more stability updates. But that, along with the "you take all the updates because we said so and no, we won't give you patch notes," is part of Windows as a Service. Like modern video games, you get a mostly functional product on disc that requires a lot of patching on day 1 and maybe a multi-player mode to be added later.
If someone made a tool that lets me use Windows 10 with security updates but without spying or cloud or unwanted upgrades, I would pay for that. I don't see any technical reason why a 3rd party can't provide that. When Windows 8 messed up the start menu, tools like Classic Shell stepped in to fill the gaps, with huge popularity, and I think those download statistics were actually persuasive to the "data driven" business strategizers at MS.
I don't know why this got modded down. It is a pretty good solution.
Many people would probably balk at the domain recommendation, but you don;t have to join a domain. You can point workgroup computers at WSUS as well. These computers get their updates solely from WSUS and you can pick and choose which updates to push.
But, there's probably other ways as well. I haven't looked into exactly how it works, but Microsoft is not pushing the Windows 10 offerings to Windows 7 Pro computers joined to a domain, even without WSUS.
What I'm seeing is that the corporate, domain joined, machines don't get the telemetry updates or the Windows 10 updates offered to them at all. So, there's probably a registry change that would cause Windows Update to skip you personal machine for Windows 10 roll out.
You have made the mistake to put them on Windows. And you will have to play by the rules. When you use Windows you have surrendered your computer and the way you use that computer to Microsoft. The only advice I can give you is to just follow some Yoga course to release your anger, or to make the switch to a more free and open alternative.
Download MBSA, run it every night, check the missing patches, download and install them.
MBSA => "The Microsoft Baseline Security Analyzer provides a streamlined method to identify missing security updates and common security misconfigurations. MBSA 2.3 release adds support for Windows 8.1, Windows 8, Windows Server 2012 R2, and Windows Server 2012. Windows 2000 will no longer be supported with this release." (http://www.microsoft.com/en-us/download/details.aspx?id=7558)
Get it, write some PowerShell to run it, parse the XML it generates and install the missing patches. This allows for minimal, security-only, updates.
English is not my first language. Corrections and suggestions are welcome.
Unless your family is really short on disk space, downloading Windows 10 is not a problem. Your family does not have to install it - that's different to downloading. If they install it sometime in the next year, it will still be free. Even now, it is faster and more secure than 7. My guess is it'll soon be more stable also.
I haven't seen any forced upgrades in the wild. Not saying it doesn't happen but of the 150 or so Windows boxes on my network (about 70% Win7 and 30% Win8) I haven't seen a forced Win10 install - plenty of requests but no forces (some BYOD have upgraded and no issues yet). Just wondering what the settings are on those boxes that were forced and how the forced upgrade looks (acts). Anybody have that experience? And yes I would prefer an all Linux net but it's not going to happen with a slew of BYOD in use and the array of mandatory software in the industry that doesn't behave outside of Win.
First off, If there's no reason not to upgrade other than FUD, then they should update. 7 only has a little more than 4 years left and is already in extended support and windows 8/8.1 interface is crap vs 10. If they're worried about being spied on stay with a Local account and don't setup a Microsoft account. It will only take the same telemetry that they've been doing since the customer experience program in vista, which you can then turn off. That being said MS shouldn't have started downloading the OS on PC's without explicit reservations but even that can be disabled.
Easiest method to disable windows 10 from updating is to use the DisableGWX Policy setting. This site's Method 3 will walk you through setting the registry key. Microsoft Also has some other blocking methods as well.
If you just want security patches from that point forward go to windows update settings and uncheck "give me Recommended updates the same way I receive important updates"
In Soviet Russia, Trojan exploits YOU!
You're doing six installs per year? What kind of anecdote is this? In terms of business that doesn't even count as a statistical anomaly. Six installs per year literally nothing. I've done ~50 Windows 10 upgrades in the past two months and I don't regard that as a meaningful number.
What kind of business does this sort of ultra low volume and has three staff members?
You people are like a sick parody of infowars, except everything they claim about Obama, you guys claim about Microsoft.
Face it - there will ALWAYS be someone you feel inferior to and want to hide your insecurities from. Step one is to admit you have a problem and realize nobody cares about your porn browsing habits.
Now as for being realistic - Windows 10 will not install itself if you don't tell it to. FFS, that is the most misguided interpretation of anything I've seen on Slashdot for weeks and is worthy of one of the independent-gamergate-neckbeard-spinoff news sites.
You seem to have conflated "Windows 10 files preloading in the background" with "Bill Gates bogeymen will emerge from your closet and install Windows 10 through a virus-infected firmware update to your motherboard"
Get a grip.
I'm in the same boat and would like a real answer as well.
I purchased a computer with Windows 8.1. It's a productivity computer and therefore like to exercise some level of control over it. I would like to KEEP Windows 8.1 on it so that, if nothing else, I can avoid resolving incompatibilities in drivers and programs when I should be getting work done. I don't think that it's unreasonable for me to apply security patches to this version of Windows, as released by Microsoft, without being forced into a full OS upgrade.
I manually install updates but immediately cancel when it says it's updating to Windows 10. This status may be a generic indicator and let me sidestep the real OS upgrade later in the process. I don't really want to find out.
It figures that asking this question on Slashdot would get you any number of lectures on how you're getting what's coming to you and/or how switching to Linux would fix everything. Criticism, sure.. Help, no thanks!
Best of luck. I think you're better off checking a dedicated Windows forum than asking here.
Have a look at WSUS Offline. It does more or less what you're asking for, although you do have to run the collector and client manually every post patch Tuesday.
Resistance is futile. Reactance buggers it up.
Microsoft forcing the Windows 10 upgrade on people who don't want it
That's was a forced download, but not a forced install, wasn't it? I'm still seeing that little icon waiting for me.
Have had it since WFW 3.11 in '95 and survived the many flavors of Winders so I could play games although I dual-booted with OS/2 then Linux. Steam has enough games to keep me busy for a long time. Bye bye M$!
First, if they are moving from 7 to 10 they are learning a new OS
In what world? For the basic user very little at all has changed between 7 and 10. The interface looks a tiny bit different, "All Programs" is now called "All Apps" in the start menu but otherwise there's absolutely nothing about windows 10 that needs "learning".
To the extent that they're moving from Windows 7 to Linux, the learning curve may be less than that from Windows 7 to Windows 10. Things are less screwed up in the user interface, and probably more familiar to a Windows user.
If they're moving to a KDE or xfce distribution, there might be a (very small) learning curve. It might take longer if there's a highly customized xfce configuration (as we have). Similarly for Gnome distributions. Of course, I agree that the learning curve for Unity is quite long, and might require as much as a whole hour. Oh, and you can change the user interface later, if you want.
It's somewhere in the small print: you gotta suck it up.
Or change your software provider. I've heard that this linux thing is better in that regard.
Give them each a fairly sizable usb stick. Make it boot linux with persistence. Linux mint or linux lite would be my choices. Set their computers to boot the usb stick first. If they have any problems, they can just pull the stick and have their windows back. Tell them the truth - Linux is free, has regular updates, is so unlikely to catch malware that people generally don't install anti-virus software, and is closer to what they are used to than windows 10 is. If it's a fear of changing brand names, the requisit car analogy would be along the lines of "When all you've driven is fords, switching to a chevy may be less painfull and more rewarding than you think."
On the one hand you take life too seriously, and on the other, you do not take playful existence seriously enough. Seth
Microsoft has two versions of Windows 10 for volume license users: CB and LTSB.
CB (Current Branch) is the same as what the home users have to deal with.
LTSB (Long Term Service Branch) however does things differently.
"For example, systems powering hospital emergency rooms, air traffic control towers, financial trading systems, factory floors, just to name a few, may need very strict change management policies, for prolonged periods of time. To support Windows 10 devices in these mission critical customer environments we will provide Long Term Servicing branches at the appropriate time intervals. On these branches, customer devices will receive the level of enterprise support expected for the mission critical systems, keeping systems more secure with the latest security and critical updates, while minimizing change by not delivering new features for the duration of mainstream (five years) and extended support (five years)."
Source: Windows 10 for Enterprise: More secure and up to date
https://blogs.windows.com/busi...
The only other solution I can think of would rely on setting up a WSUS server, and managing the updates from there. The OP would then just need to change some registry settings on his family's computers to point to his WSUS server for updates.
Instructions: Configure Automatic Updates using Registry Editor
https://technet.microsoft.com/...
I tell people that I don't do Windows. End of story. If they want me to help them, then they have to start by buying/installing a quality system, be it Apple, Linux or BSD. If they insist on using Windows crapware, then they are on their own. I don't want to waste my time with it, for the same reason that I don't want to maintain someone else's Trabant or 1960s VW Beetle.
So, in other words, because you're incompetent at Windows, Trabant, and 1960s VW Beetle.
It little behooves the best of us to comment on the rest of us.
Hi. I'm mostly a Mac and Linux guy, but I have a Windows box I use for gaming. Windows 10 is a fine product: it's a nice extension of the Windows 7 experience, with better security, good speed, and some nice features. As you say you're not going to be able to get your family off Windows, they should be running 10, with all the updates. Trying to stick with 7 (or god forbid, XP), they'll have more incompatibility issues going forward rather than less, and picking and choosing Windows updates is more trouble than it's worth.
If you tell them to buck the trend and set up something weird, they're going to ask you to deal with the consequences.
The three registry keys to disable GWX and the GWX advert in Windows Update are these...
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX]
"DisableGwx"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade]
"ReservationsAllowed"=dword:00000000
Then open an elevated command prompt (search for cmd in the start menu, right click and Run as Administrator) and uninstall the following telemetry KBs...
wusa /uninstall /kb:3068708 /norestart /uninstall /kb:3022345 /norestart /uninstall /kb:3075249 /norestart /uninstall /kb:3080149 /norestart
wusa
wusa
wusa
In Control Panel > Windows Update > Change Settings, untick "Give me recommended updates the same way as I receive important updates" as some optional updates have been used to send down unwanted GWX/Telemetry updates.
Also in Control Panel > Windows Update, search for updates, then view the optional ones, then hide three of those KBs above (3022345 shouldn't appear as it's superseded) by right-clicking on them and choosing the hide option.
Now reboot the computer, search for CEIP in the start menu, run it, and change the setting to disable telemetry to MS.
If the C:\$WINDOWS.~BT then your computer is downloading Windows 10 in the background. Search for CleanMgr in the start menu and run it to remove the "Windows Update temporary files" category. Although that may unhide those three KBs above and you many need to rehide them.
Telemetry info from http://www.ghacks.net/2015/08/28/microsoft-intensifies-data-collection-on-windows-7-and-8-systems/
Unless MS send a recommended update which adds more GWX or Telemetry stuff to Windows 7/8, your extended family's computers will look after themselves from now on.
Not yet a fan of Linux or BSD but slowly becoming one. Yes, everything runs on windows, but, see what type of programs they need and maybe there are some alternatives on Linux or BSD Distro's. Or they could run Windows(no internet access) as guest under Linux(internet access) VM Host and I'm thinking about doing the same thing.
I have a relative who is still using Windows XP. He restricts his browsing to reputable sites and has his Windows Firewall activated in addition to being behind a router which protects him from direct intrusions from outside the home network as well as from within.
OS patches are necessary for school (esp. post secondary), work and other 'public' environments (laptops at cafes etc)
Beyond that, it's overkill. The majority of home compromises come from attempts at viewing pornography, downloading pirated software and being tricked by false system scanners running in a browser window convincing the operator to download something to fix a non-existent problem.
Education is the best tool. I've been using PCs for 30 years without anti-virus software, from MS-DOS, through WinDOS (9x/ME) and the NT/modern Windows kernel based systems. Though once in a while I'll download software, run a scan, find out I have nothing and remove the anti (virus/malware/etc) software.
Write off the country with the largest pirated Windows install base? What exactly are they writing off?
Is this even a serious submission? Have you ever used a computer before?
See subject: It's pretty ok & does the job well enough!
* Personally, I'd like it better were it GUI, but character mode/DOS mode/tty (whatever you want to call it) works...
APK
P.S.=> The dev keeps up on it too, regularly updating it as is needed (another nice thing)... apk
Isn't what the settings in the "Windows Update" control panel are for? Have "important updates" install automatically, and don't tick the "recommended updates" check box.
For that matter, if Microsoft offered Win10 with a Win7 upgrade policy (user-controllable, individual updates can be deferred, and all telemetry including error reporting can be turned off), I'd pay a premium for that. As of now, the closest thing is Enterprise LTSB, and it's not available for purchase by individuals. How fucked up is that?
Basically the "Inmates are running the Asylum at Microsoft right now.."
So do what Linux did.. [disable, cripple, hobble, remove Windows Update].. begin downloading and "vetting" or certifying the legitimacy of individual Windows Patches and put them in a distributed "repository" system.. put the choice back in the hands of the people.
There is already a system for doing thing.. like DNS.. "people" not "marketing droids at Microsoft"... long ago began work on something Microsoft tries to emulate today.. a [Package Manager] and a ssytem for distributing and applying packages [YUM].
Then you can do so many things Microsoft is still trying to play catchup on.. like ensuring 'dependencies are met'.. like roll fowards, backwards.. rebuilding.. chain of authority.. versioning for architectures.. personal repositories.. business repositories.. optional repositories in addition to primary..
This "Ring STUID.. Ring LUDRICIOUS" stuff is just Microsoft trying to copy Linux.. plain and simple.
Its time to just [stop] Microsoft from running (ruining?) things.. and take back control.
I believe that, in the past, Microsoft lied about certain updates as to whether they were vital security updates or not,
They could just as easily lie in the future and force down something that helps them keep a better eye on us but label it as vital security.
Any non-IT person would normally be well advised to have the system automatically install security updates. Those of us who are may have to trust MS as our particular area of expertise does not include what "this" update is supposed to fix. Does everyone here check everything anyway? Life is busy...
I have come across so many idiots who think that all you need is education and caution and you don't need A/V. Please keep it up guys. it's sometimes really funny.
I'll see your Constitution and raise you a Queen.
They need help? Too bad. It's your own undoing. I don't touch Microsoft Windows and know nothing about it. Linux Mint Cinnamon isn't exactly significantly different conceptually and if nearly everybody around me has converted to one version of Linux or another certainly you can too.
I installed 10 on a laptop. When setting up it gives an option to opt out of auto update. But... auto updates anyway. What scares me is that I learned long ago not to install most optional updates. Video drivers usually don't work. Lan drivers usually don't work. For the lan, you have to dig out the mobo software and reinstall it. Then get on line to get video drivers. Not fun.
As far as the 8 metro screen. How is it, after all this time, no one seems to know how or even that you can shut it off. I didn't like it. I disabled it. The only thing 8 screwed up, IMO, is the start menu. Which classic start fixed. Of course, 10... removed it. So here we go again.
Wuddooeyeno? IITYWYBMAD? Like nuts? eclecticallyincorrect.com
The only real way to protect yourself is external to Microsoft software, such as at the router. The router will not know if it is a security update or a simple "lets beta test the next release on the non-commercial chumps" software release. But the real issue is who are you concerned about security protection from? The only evil doers who have ever done me real harm are Microsoft themselves, back in XP SP1 days they rewrote my NIC EEPROM during a "security update" so that it would come up in an illegal default state and not work properly in Linux (and temporarily reset the NIC state to ordinary defaults when Windows was booted). I have to question who I'm trying to protect my system from, and the biggest evil out there seems to be Microsoft. So I no longer accept any Microsoft "security updates".
I'm an American. I love this country and the freedoms that we used to have.
If staying on Windows is a must, simply get the Enterprise version. It allows to manage the updates the updates the way it was in Windows 7.
0) Set up Windows 10 with local accounts, not a MS Account. Use OneDrive (if you must) over a browser connection rather than by direct access in Windows. Go through Windows preferences (in any version, but especially 10) to turn off whatever communication you don't need. Your Internet usage will drop dramatically. Understand that there's a small chance MS will ignore or override some of those settings at one time or another, so check them occasionally, but don't panic.
1) When using Windows 10 (also 8 and 7, if you're paranoid enough), simply disconnect from the network or use "airplane mode" when not doing something that requires network or internet access. Use non-MS stand-alone (not cloud-connected) software where feasible.
2) With Win 7 at least, you should be able to set up firewall rules that prevent access to or from known MS collectors. Should also work in 8 and 10, but may be better hidden. Yes, that works only as long as MS doesn't change the name or address, but it works until then.
3) If you need access to the internal network, such as for a shared printer or access to a local server, block the MS collector addresses at the Internet access point's firewall.
4) Switch to Linux. Understand that a whole different set of tweaks will be needed, and some Windows stuff simply will not work there even with shims like Wine. And with most flavors of Linux you will have to take care of yourself rather than having Big Mama Microsoft to lean on (if you dare). And Linux changes faster than Windows (no more install XP and use forever).
TANSTAAFL
What do they think moving to Win 10 will be like?
A piece of cake?
In Steam's August Hardware and Software Survey,16% of Steam gamers were running 64 Bit Win 10, a bare 0.92% Linux. Steam Hardware and Software Survey: August 2015
Worldwide usage of Windows 10 in its first calendar month (August) was 4.9% compared to 1% for Windows 8 and 4.1% for Windows 7 after their first complete month.
Windows 10 first month worldwide usage well ahead of that recorded by Windows 8
Just an FYI, as this is a Windows update thread which is trying to avoid Win10 nagware + telemetry. These are the updates I've identified so far. Feel free to add/update the list:
KB 2952664
Compatibility update for upgrading Windows 7
https://support.microsoft.com/...
KB 2976978
Compatibility update for Windows 8.1 and Windows 8
https://support.microsoft.com/...
KB 3022345
Update for customer experience and diagnostic telemetry
https://support.microsoft.com/...
KB 3035583
Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
https://support.microsoft.com/...
KB 3068708
Update for customer experience and diagnostic telemetry
https://support.microsoft.com/...
KB 3075249
Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
https://support.microsoft.com/...
KB 3080149
Update for customer experience and diagnostic telemetry
https://support.microsoft.com/...
I think you've misread the article you're linking to. All the article said is that it download ~5gb into a folder as part of the update. And leaves it there. Does nothing with it unless the user specifically chooses to click the "upgrade" button.
Your family aren't being guinea pigs. The worst they'll get is ~5gb less space on their hard disks. Heck, they've probably got more than that in their recycle bin and system restore points and so on. Totally not worth investing your time to prevent this.
Windows is kill.
By fucking up the one thing they did correctly, all of Windows is now on a very short fuse. Everyone was expecting 10 to be 7 but better. Instead it's some cloud bullshit auto updating ad serving key logging pile of shit.
You're fucked if you want to game, you're fucked if you aren't a computer wizard. Fucked fucked fucked. My recommendation to family is frigging "buy a Mac". My recommendation to those good at computing is, start ramping up a Linux distro that you can get your games to run under, or buy a PC for gaming that uses Xbox OS aka Windows 10 and do nothing else on it, and a Linux box for all actual computing. That's the same advice for anyone with a Windoze-need- the plethora of applications that refuse to support non-shit OSes, if you need them professionally, should be done on a Windows computer that knows nothing of your email or browsing and god forbid anything else.
It didn't need to come to this. But Microsoft persists.
Incompetence first requires the desire to succeed at something.
Incompetence first requires the desire to succeed at something.
Incompetence is the desire to continue doing something without improvement after discovering you have no skill at it.
If you don't like the idea of being screwed over then perhaps Windows 10 is not for you.
"Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife
See subject: It's YOU vs. myself, here -> http://slashdot.org/comments.p...
* :)
(Always a pleasure making a weasel like YOU run like the scared little weasel you are...)
"Incompetence is the desire to continue doing something without improvement after discovering you have no skill at it." -
You're not very good @ trolling, even stooping so low as to TRY to talk behind my back -> http://slashdot.org/comments.p...
APK
P.S.=> Truer words were NEVER spoken on /. & you help prove my point... apk
it comes with Windows installed from the factory. Last time this laptop came with windows 8.1. I overwrote that OS with Ubuntu after accidently starting Win 8 once. I had to go into the BIOS manager and change the boot from UEFI to BIOS, then it was a snap.
I have a spare hard drive from one laptop, a friend suggested buying a dupe drive, swapping out the drive with Windows on it, then installing Linux Mint, which worked pretty well, but wasn't moving forward as fast as Ubuntu seemed to.
But MS might notice that some of their windoze sales don't EVER ask for any updates... to me that means they have been wiped. I worked in a fairly big IT shop for many years - we ran Oracle DB on Hardware that was built and sold with MS Server installed, but our DBAs overwrote that with Red Hat, and then installed Oracle on the servers. Much more reliable than MS products. Bullet proof. Updates went on the test boxen, and didn't go the production until there were no detectable problems.
That doesn't mean no problems could slip through to production, but it shifted the odds severely in favor of stability. Most problems we encountered were from Netware upgrades in the networking area, because the networking guys thought they didn't need to follow standard testing protocols. But when one regional office can't use a production system after a network "upgrade" and all the other offices are OK, guess what is to blame for that failure? Yes, the network change.
When you install Windows on "your" computer, you effectively make it property of Microsoft.
Microsoft can decide when to install updates, what updates to install, what data to send, how much disk space you can use, etc.
In short, Microsoft can do whatever it wants to its computer. It just allows you to use it as and when Microsoft sees fit.
Ever wonder why the "My Computer" icon is now just "Computer"?
Eventually, you will pay a small monthly fee for your computer access. The small monthly fee would allow you a certain amount of storage, cpu usage, etc.
Welcome to the mainframe era, and dumb terminals. Everything old is new again.
There are no "pirated" copies of windows 10 - IT IS FREE.
MS needs the hundreds of millions of Chinese computer users.
AND they will deal with the devil when required.
For example, it looks like they have already agreed to replace
BING with BAIDU.
http://blogs.windows.com/bloggingwindows/2015/09/23/windows-10-in-china/
MS already provides China with Win 10 source.
Will China be allowed to veto updates?
WSUS is the way to go. I've used WSUS in a lot of AD domain environments, but you don't need a domain to deploy WSUS: https://technet.microsoft.com/... With WSUS you can cherry-pick and approve updates individually. You can also easily write auto-approval rules for precisely what you're looking for (If update is of type "Security Update", then Approve).
-- Halfabee
Microsoft is going to get more effective at this each pass.
Only losing lots of customers will stop this process from getting worse.
It would be different if it were not spying on you and serving ads to you using your own bandwidth but it is.
Best to throw your relatives to the wolves, let them develop a reasonable distain for microsoft and either go to apple or linux of some kind.
She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
why do you help with them with the shitfest that is osx? you don't get tired of not being able to help people adjust their base font and button sizes?
world was created 5 seconds before this post as it is.
I've discovered that iceweasel is a painfully limited web browser, firefox a slower, but about as painful web browser, and if I want to use a web browser with snap, I'm stuck using a closed source browser that is bundling all sorts of information about me to corporations and the NSA. You can't win, you can't lose, you can't break even.
Windows update isn't forcing you to update to Windows 10, so if you are installing Windows 10, then it's a user who has clicked on a message to install Windows 10....
I run a WSUS in a 2012 VM, and I have all Windows 10 unchecked. All my boxes use it for updates. But the boxes are all Windows 7 Enterprise, and I don't think that will get pushed to Windows 10 as it's a valid MSDN corp key. Theoretically you could set up your own WSUS and punch a hole in your firewall, use a static / dynDNS ip so and write up a REG key that points at your server and give this out to your relatives.
Good luck with all that!
Turn off automatic updates, then run this batch file
https://github.com/WindowsLies/BlockWindows
Optional 3rd step: manually block the HOSTS entries that are also shown at the above page.
This is the year of Linux on the Desktop! (tm)
Oh. Wait.
Well, maybe Apple will let you buy OSX to install on consumer-grade computers that aren't Macs...
Oh...wait...
The only safe way to run Microsoft software, is inside a virtual machine.
That way, disk access, network access, and even memory access can be tightly controlled.
I find MSFT software actually performs better inside a VM, since the hardware is much simpler. The OS as a result, is less crash prone.
For my Windows 10 VM, I disable network access, give it access to another virtual disk that holds only the files I need to edit at one time. After I'm done working, the disk is rsync'd to to the Linux partition, the files cleaned, stripped of MSFT meta-data, and the VM reset.
That way, MSFT can collect whatever info it likes, basically, to the telemetry system, I've never really used the OS.
Too busy to read all the replies to see if someone called out your FUD. Microsoft won't update your system to windows 10 on it's own.
Your reading of {some internet nerd}'s advice is incorrect. Unless you are on a metered connection, and a few extra GB of download is going to cause you so much grief that it's worth spending time on it, then you have nothing at all to do, and you won't have Windows 10 installed.
Really, is reading comprehension so hard?
I upgraded a few weeks ago, and I find it to be faster than even Windows 7 (had 8.1 on my personal laptop before...it could be a dog.)
That said, the only easy way I know of to manage updates are installed and which aren't is to use WSUS, but I'm pretty sure it requires controlled machines to be members of an Active Directory, so not sure if that is feasible in your scenario.
Delete the Windows 10 download folder C:\$Windows.~BT and replace it with a locked file of the same name.
Grant full access to a non-administrator user and then remove ALL access rights to System and Administrator groups.
When Windows tries to re-download the Windows 10 installer, the download will fail.
Windows 10 Professional has a “Defer upgrades” options, which I believe will be the best option at this point.
"Home users can’t delay upgrades at all, but Professional editions of Windows 10 get a “Defer upgrades” option in the Advanced options interface. If you enable this, you’ll still receive security updates automatically. Windows 10 will put off downloading feature updates for several months until they’ve had plenty of time to be tested on home PCs.
This is designed to make business PCs a bit more stable and allow system administrators to test new feature updates before they reach their users. If you upgrade to Windows 10 Professional, you could enable this option yourself. But, either way, you’ll get those feature updates — it will just happen a few months later."
Source: http://www.howtogeek.com/223068/what-you-need-to-know-about-windows-update-on-windows-10/
I was just about to upload a video complaining to 7 11 about employees who claim they are under orders of an Arab leader and I identify them as nephews of a well known terrorist. Manged to comment privately to 7-11... then facebook ceased all replies, but Windows says it is online... what can you make out of it? Nope, this is no exaggeration, my personal safety depends on being connected ad in touch with people who can only contact me through Facebook.
Great! It is going through! But not downloading fully yet.