Slashdot Mirror
Ask Slashdot: Make Windows Update Install Only Security Updates Automatically?
An anonymous reader writes: After the news earlier this month about Microsoft forcing the Windows 10 upgrade on people who don't want it, my sizeable extended family has been coming to me for a solution. They don't want to be guinea pigs this early in the Windows 10 release cycle, but it looks like Microsoft may not be giving them a choice. My reading of Woody Leonhard's advice is that the only way to ensure the upgrade doesn't happen is to disable Windows Update, but that seems extreme. I want my family to install security updates, but I don't relish the idea of explaining to them how to install just those and hide the less-desireable updates.
The ideal solution would be to have only security updates install automatically, but it looks like it's easier said than done. I've looked at third-party tools like Autopatcher and Portable Update, but a security-only option doesn't seem to be very standard. From what I've read, Microsoft doesn't even package security updates separately, sometimes mixing merely Important and Recommended updates in the downloaded CAB file. I wish I could get them off Windows, but it's not an option. They use Windows at work or school, and don't want to go through the process of learning another OS. Maybe the current situation with Windows 10 will convince them eventually, but they need something now. I would really like to come up with a solution before the next Patch Tuesday on October 13. Do any of the more knowledgeable Slashdotters out there have any advice?
The ideal solution would be to have only security updates install automatically, but it looks like it's easier said than done. I've looked at third-party tools like Autopatcher and Portable Update, but a security-only option doesn't seem to be very standard. From what I've read, Microsoft doesn't even package security updates separately, sometimes mixing merely Important and Recommended updates in the downloaded CAB file. I wish I could get them off Windows, but it's not an option. They use Windows at work or school, and don't want to go through the process of learning another OS. Maybe the current situation with Windows 10 will convince them eventually, but they need something now. I would really like to come up with a solution before the next Patch Tuesday on October 13. Do any of the more knowledgeable Slashdotters out there have any advice?
Now, of course, I read the descriptions.
Don't worry, Microsoft has a solution for that: with Windows 10, they simply don't offer descriptions. They've also started bundling feature updates and security updates into single patches. Probably. From what people have been able to determine that existing patches do.
There's no reason they can't decide to start doing that for all updates. Will KB414140 force you to install Windows 10? Include telemetry? Fix a zero-day exploit that's being actively exploited? All of the above? Who knows!
That Win7 EOL is "coming soon" is a pretty good exaggeration. Very soon now Ubuntu 15.10 is being released, you'll have 16.04 LTS, 16.10, 17.04, 17.10, 18.04 LTS, 18.10, 19.04, 19.10 and 20.04 LTS before Win7 expires. Ten distro versions and three long time support releases later, a lot could change between now and then. I switched to Linux back in early 2007 because Vista was terrible but returned to Win7 in late 2010 mainly because of gaming. And I do have a laptop upgraded to Win10, unlike Vista it's not a bad OS except it comes with too many bundled privacy invasions. The OS is stable, the drivers work, IO handling seems faster, technically I haven't found any reason not to upgrade.except the anti-features.
Live today, because you never know what tomorrow brings
You'll get what Microsoft wants and like it, or not - they don't care about your preferences anymore.
If you want to send them a message, stop buying their software. This is a less painful option than it used to be, believe it or not.
--
Not only stop buying, but STOP USING their software.. The reason Windows 10 is free is because YOU ARE THE PRODUCT that MS is *selling* to
anybody with the right # of $, plus I have to imagine they're in tight with the NSA, since the NSA needs to fill that giant datacenter in Utah, and what better
data than EVERYTHING you type, say and see on the computer that *used* to be YOURS and now belongs to MS.. Its a proven fact that 10 keylogs and captures large quantities of video/audio from any microphones/cameras on said system.. I used/admin'ed Windows for over 25 years (1991-2010) and when I retired I swore I'd quit using MS products and stay on Linux. It pains me to see how Americans have become nothing but lemmings running full-tilt off the cliff when it comes to computers... I have no fear either, that *if* enough of us non-lemmings skip sucking on MS's tit, and instead use of the many Linux/BSD distros, it won't be long before we're branded terrorists by this "government".... Hope I'm dead and buried by then (65 now..)
THANK YOU, Edward Snowden!! Americans owe you a debt of gratitude (whether they know it or not..)
"Zorin OS is a multi-functional operating system designed specifically for Windows users who want to have easy and smooth access to Linux."
The three registry keys to disable GWX and the GWX advert in Windows Update are these...
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX]
"DisableGwx"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"DisableOSUpgrade"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade]
"ReservationsAllowed"=dword:00000000
Then open an elevated command prompt (search for cmd in the start menu, right click and Run as Administrator) and uninstall the following telemetry KBs...
wusa /uninstall /kb:3068708 /norestart /uninstall /kb:3022345 /norestart /uninstall /kb:3075249 /norestart /uninstall /kb:3080149 /norestart
wusa
wusa
wusa
In Control Panel > Windows Update > Change Settings, untick "Give me recommended updates the same way as I receive important updates" as some optional updates have been used to send down unwanted GWX/Telemetry updates.
Also in Control Panel > Windows Update, search for updates, then view the optional ones, then hide three of those KBs above (3022345 shouldn't appear as it's superseded) by right-clicking on them and choosing the hide option.
Now reboot the computer, search for CEIP in the start menu, run it, and change the setting to disable telemetry to MS.
If the C:\$WINDOWS.~BT then your computer is downloading Windows 10 in the background. Search for CleanMgr in the start menu and run it to remove the "Windows Update temporary files" category. Although that may unhide those three KBs above and you many need to rehide them.
Telemetry info from http://www.ghacks.net/2015/08/28/microsoft-intensifies-data-collection-on-windows-7-and-8-systems/
Unless MS send a recommended update which adds more GWX or Telemetry stuff to Windows 7/8, your extended family's computers will look after themselves from now on.