Slashdot Mirror


Ask Slashdot: Make Windows Update Install Only Security Updates Automatically?

An anonymous reader writes: After the news earlier this month about Microsoft forcing the Windows 10 upgrade on people who don't want it, my sizeable extended family has been coming to me for a solution. They don't want to be guinea pigs this early in the Windows 10 release cycle, but it looks like Microsoft may not be giving them a choice. My reading of Woody Leonhard's advice is that the only way to ensure the upgrade doesn't happen is to disable Windows Update, but that seems extreme. I want my family to install security updates, but I don't relish the idea of explaining to them how to install just those and hide the less-desireable updates.

The ideal solution would be to have only security updates install automatically, but it looks like it's easier said than done. I've looked at third-party tools like Autopatcher and Portable Update, but a security-only option doesn't seem to be very standard. From what I've read, Microsoft doesn't even package security updates separately, sometimes mixing merely Important and Recommended updates in the downloaded CAB file. I wish I could get them off Windows, but it's not an option. They use Windows at work or school, and don't want to go through the process of learning another OS. Maybe the current situation with Windows 10 will convince them eventually, but they need something now. I would really like to come up with a solution before the next Patch Tuesday on October 13. Do any of the more knowledgeable Slashdotters out there have any advice?

11 of 288 comments (clear)

  1. Fail idea by drinkypoo · · Score: 5, Insightful

    If any number of people did this, then Microsoft would just push a "security" update that offered you Windows 10 or installed spying on the basis that they could somehow offer you more security. "KB6666666 - improve security by making windows phone home at every opportunity"

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    1. Re:Fail idea by Z00L00K · · Score: 4, Insightful

      It's time to start asking the question about "security" updates - is it for you or for Microsoft they improve the security?

      --
      If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
  2. simple by Anonymous Coward · · Score: 0, Insightful

    Disable updates on Windows XP, or don't install any Microsoft (or American) software.

  3. Sorry Friend by Ol+Olsoc · · Score: 3, Insightful
    When you opt for the Windows experience, you gonna get whatever experience they want you to get.

    But any way I know of of blocking any updates blocks all of them. like pulling the cable or disabling wifi.

    --
    The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  4. I was going to suggest Debian GNU/Linux. by Anonymous Coward · · Score: 2, Insightful

    I was going to suggest Debian GNU/Linux as an alternative OS, but then I remembered how I was treated like a filthy guinea pig when Debian decided to transition to systemd. When I upgraded my Debian testing (which, contrary to its name, has little to do with testing and has historically been far more stable than even the stable releases of other Linux distros) workstation and systemd was unexpectedly installed, everything went to hell. My workstation wouldn't boot, the error logging was all fucked up, and all I found when googling for help were many other complaints about various problems from many other victims.

    Knowing how frustrating it can be when an operating system provider ends up trashing an existing installation through what should be routine updates, I realized that I could not possibly recommend Debian. Perhaps the submitter could do what I did: switch to FreeBSD. It's a mature, reliable, robust operating system that can still run a wide variety of the software that runs on Linux. Its developers care deeply about not damaging existing installations. FreeBSD has shown itself to be the future.

    1. Re:I was going to suggest Debian GNU/Linux. by drinkypoo · · Score: 5, Insightful

      Knowing how frustrating it can be when an operating system provider ends up trashing an existing installation through what should be routine updates, I realized that I could not possibly recommend Debian. Perhaps the submitter could do what I did: switch to FreeBSD.

      Well, there's also switching to Linux Mint, which is what I suggest at this time. I'll probably keep advocating that at least up until they decide what to do about systemd in the long term. Hopefully, longer.

      FreeBSD has shown itself to be the future.

      It's not even the present if you want a decent nVidia driver or if you want to run vmware, which I still use to handle some cases that make KVM shit itself. Other than that, I have nothing against it, but that's enough to make it a show-stopper for me. Linux also runs on more hardware, and I prefer to have more or less one OS on everything for my convenience. My router runs Linux, my NAS runs Linux, my desktop (not the gaming one, but anyway) runs Linux, my handhelds even run Linux, albeit a kind of wacky version thereof. Oh yeah, got a fire stick coming, that runs Linux. All my game consoles with ethernet ports run Linux when I want them to, except for the 360... which I am probably about to donate to someone who lost all their shit in the recent fires. Guess I should put the screws back in it just in case they ever drop it.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  5. Sorry, but you're screwed by Irate+Engineer · · Score: 4, Insightful

    You'll get what Microsoft wants and like it, or not - they don't care about your preferences anymore.

    If you want to send them a message, stop buying their software. This is a less painful option than it used to be, believe it or not.

    --

    Left MS Windows for Linux Mint and never looked back!

    Vote for Bernie in 2016!

  6. Re:Windows 7 EOL is coming soon by LVSlushdat · · Score: 3, Insightful

    According to microsoft policies [microsoft.com] Windows 7 is already out of mainline support. It will have extended support till 2020. But according to its own policies, win7 should be getting only security updates, no "improvements" nor "enhancements". So in a just and fair world, you should get only critical security updates alone for Windows 7.

    But, as Scar told the mouse, "Life isn't fair, is it?".

    WHO THE FUCK CARES if it gets no "improvements" nor "enhancements"... 7 was the last tolerable Window s version, and if you can keep that insidious "telemetry" crap off of it, it should be good for the next 5 years or so, if for *some* reason you HAVE to stay on Windows...

    --
    THANK YOU, Edward Snowden!! Americans owe you a debt of gratitude (whether they know it or not..)
  7. DisableGWX by Deathlizard · · Score: 2, Insightful

    First off, If there's no reason not to upgrade other than FUD, then they should update. 7 only has a little more than 4 years left and is already in extended support and windows 8/8.1 interface is crap vs 10. If they're worried about being spied on stay with a Local account and don't setup a Microsoft account. It will only take the same telemetry that they've been doing since the customer experience program in vista, which you can then turn off. That being said MS shouldn't have started downloading the OS on PC's without explicit reservations but even that can be disabled.

    Easiest method to disable windows 10 from updating is to use the DisableGWX Policy setting. This site's Method 3 will walk you through setting the registry key. Microsoft Also has some other blocking methods as well.

    If you just want security patches from that point forward go to windows update settings and uncheck "give me Recommended updates the same way I receive important updates"

    1. Re:DisableGWX by drinkypoo · · Score: 4, Insightful

      First off, If there's no reason not to upgrade other than FUD,

      Look, shill, Microsoft actively spying on users isn't FUD. It's not a fear, because they're doing it. It's not uncertainty, because they're doing it. And it's not doubt, because they're doing it.

      Easiest method to disable windows 10 from updating is to use the DisableGWX Policy setting

      That is not the question, which the summary makes obvious, since the poster mentioned Windows 10 attempting to install itself. Clearly they want to avoid Windows 10.

      If you just want security patches from that point forward go to windows update settings and uncheck "give me Recommended updates the same way I receive important updates"

      The problem, as I pointed out in the top comment in this thread, is that you cannot trust Microsoft not to put other things into "Security Updates". This is especially true on Windows 10 where they are providing less information about what is actually in patches than literally ever before, as pointed out by a comment in that part of this thread. So no, that doesn't work.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  8. Re:Windows 7 EOL is coming soon by Anonymous Coward · · Score: 2, Insightful

    Run your work and personal stuff in Linux, only run games with Windows 10 (or buy a console). I don't understand why people find this such a difficult concept.