News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • Configuring update on win10/pro

    Posted on berniec Comment on the AskWoody Lounge

    Home Forums AskWoody support Windows Windows 10 Questions: Win10 Configuring update on win10/pro

    This topic contains 26 replies, has 11 voices, and was last updated by  anonymous 5 months ago.

    • Author
      Posts
    • #1661667 Reply

      berniec
      AskWoody Plus

      I’m trying to get my new win10/pro {1809}system configured and I have been thoroughly warned to disable automatic updates but I am not sure how to make that happen.   I find lots of sites with ‘how to’s and they’re all different and all seem to be aimed at win10/home.   What should I do?  I’ve read about being able to “pause” updates for a week, but I’ve looked everywhere and I have no such setting [at least none that I can find].

      I’ve been looking at the group policy editor for windows-update and that looks like a likely, but potentially dangerous place to mess around.  they are *all* “Not configured”.   I see one that looks promising: “Configure Automatic Updates”.  As all the other policies it is neither enabled or disabled,k but just “not configured”.     I see that it has a setting:

      ———————————————
      3 = (Default setting) Download the updates automatically and notify when they are ready to be installed

      Windows finds updates that apply to the computer and downloads them in the background (the user is not notified or interrupted during this process). When the downloads are complete, users will be notified that they are ready to install. After going to Windows Update, users can install them.

      —————————————–

      This sounds like it handles updates to make them work just like in win7.   If so, why so many odd things [the ‘pause’ that I can’t find, messing with metered downloading, or the BITS service or …]???    Is the only thing i have to do to get control over updates is to configure/enable this policy and leave it at its default [3]?

       

    • #1661966 Reply

      PKCano
      Da Boss

      Settings/Updates & Security/Windows Update/Advanced Settings
      Screen-Shot-2019-05-17-at-4.18.57-PM

      Delivery Optimization

      Screen-Shot-2019-05-17-at-4.19.48-PM

      Group Policy

      Screen-Shot-2019-05-17-at-4.21.30-PM

      Attachments:
      2 users thanked author for this post.
    • #1662297 Reply

      PKCano
      Da Boss

      Explanation – In Advanced Options
      SAC – gives you Patch Tuesday Security Cumulative Updates (no Previews which are meant for testing).
      Defer Feature Updates = 365 holds off UPGRADES for 365. This can be set wherever you want. I set it at 365, then I can choose when to upgrade by lowering the number when I’m ready
      Defer Quality Updates = 0 allows Monthly CUs to be seen immediately after release. I set this to zero, b/c I want to be able to see what’s out there. If you set this to a number, the updates do not show up in the queue for that many days.
      No Pause – if you pause updates, at the end of the pause whatever is out there installs (whether you want it or not).

      Delivery Optimization
      If you set this your network it’s OK, but you probably don’t want updates coming to your PC from any PC out on the Internet

      Group Policy
      Windows Update = Enabled, value = 2 (notify download/install)
      This prevents the updates from downloading to your PC until you click on download. If the updates are not on your computer, they can’t install. Quality updates deferral = 0 allows you to SEE the pending updates so you know what to hide if you don’t want it. But they do not download automatically.

      Use wushowhide to HIDE the updates you don’t want and the procedure in our Knowledge Base AKB2000013 to clear the Windows Update queue of the updates you hide.

      4 users thanked author for this post.
      • #1732012 Reply

        taftbaby
        AskWoody Plus

        PK, after doing the changes to group policy and services how do you actually do download and install? Click check for updates or ? Thanks for any info!

        • #1732019 Reply

          PKCano
          Da Boss

          Follow the procedure in AKB2000013 (linked above) Once you clear the WU queue and verify after reboot that only the things you want are pending, “Check for updates” is safe. Or you can wait 24 hours after clearing the queue until your computer automatically runs WU again (and you check for pending updates with whshowhide first!).

          1 user thanked author for this post.
          • #1734104 Reply

            taftbaby
            AskWoody Plus

            PK, before downloading, do I need to undo the group policy setting? Also, I know the site was down today. Looks like we have a new sign-in page?

            • #1735556 Reply

              PKCano
              Da Boss

              No, you don’t change anything in Group Policy for ordinary updating.

              If you want to install Previews (not recommended, you will need to change the Channel to SAC (Targeted). If you want the next version, you will need to change the Feature deferral to a lower number. But the GP setting of 2 will give you a “Download” button and the updates don’t download until you click on it if they are showing in Windows Update.

            • #1736115 Reply

              anonymous

              Thank You! Always appreciate the info!

    • #1662862 Reply

      Rick Corbett
      AskWoody_MVP

      I’ve read about being able to “pause” updates for a week, but I’ve looked everywhere and I have no such setting [at least none that I can find].

      Unfortunately that functionality is introduced with the forthcoming 1903 version:

      1903-WU

      Many people use Sordum.org’s portable, freeware Windows Update Blocker (recently updated to v1.2 to deal with the Windows Update Medic Service, Microsoft’s recent attempt to stop you having control over the Windows Update service and related services)

      WUB1.2

      Just run it, choose the Disable Service option and tick the Protect Service Settings checkbox then click on the Apply Now button… then exit WUB. Note that this will also prevent definition updates to Windows Defender, if that’s the anti-malware solution you use.

      Hope this helps…

      Attachments:
      1 user thanked author for this post.
      • #1663499 Reply

        PKCano
        Da Boss

        Strange. I’ve had “Pause” on my 1809 Pro ever since. See screenshot above.

        • #1685185 Reply

          woody
          Da Boss

          The “Pause” in the Advanced Options page in all versions of Win10 is different from the “Pause” on the main Windows Update page introduced in 1903.

          It’s confusing. I’ll be writing about it when 1903 comes out and we’re sure of the setting and what it actually does.

          For now, don’t use “Pause” on 1809 or earlier machines. Use the branch selection (SAC), feature update deferral (180), and quality update deferral (15).

          Delivery Optimization is a completely different can of worms. It’s been the source of many problems with corporate networks. Don’t use it.

          1 user thanked author for this post.
      • #1663693 Reply

        b
        AskWoody Plus

        Pausing updates has been available in Windows 10 Pro for more than two years, since version 1703 (and was originally 7 days only):

        What’s new in the Windows 10 Creators Update Settings app

        Knuckle dragger Cannon fodder Chump Daft glutton Idiot Crazy/Ignorant Toxic drinker Blockhead Unwashed mass Seeker/Sucker "Ancient/Obsolete" (Group ASAP) Win10 v.1909

        1 user thanked author for this post.
    • #1663554 Reply

      Rick Corbett
      AskWoody_MVP

      Strange. I’ve had “Pause” on my 1809 Pro ever since. See screenshot above.

      You’re right. I thought the OP was talking specifically about the ‘7 day’ pause, i.e. 1903’s default pause interval without going into ‘Advanced options’.

    • #1664782 Reply

      berniec
      AskWoody Plus

      I’m a bit confused. First, I still don’t see ‘pause’ See attached: that’s what I get when I go to “advanced” on Updates.

      advanced

      Second, what am i missing about the group policy: the ‘2’ setting *seems* to be exactly the win7 update discipline. What goes wrong if i just do ‘2’ and not mess with any of the other stuff. Thanks for your patience…

      Attachments:
      • #1665071 Reply

        PKCano
        Da Boss

        You don’t have the deferral settings either.
        That I can’t explain.
        Let me look further tomorrow.

        You you can try the “2” setting in Group Policy.
        That will hopefully work along with whshowhide.

        BTW there is another setting in GP you may want to set – see the other “enabled” in the screenshot about excluding drivers from Windows Update.

    • #1665182 Reply

      DriftyDonN
      AskWoody Plus

      This looks like win10 Home     whats your winver show?

      3 users thanked author for this post.
      • #1665442 Reply

        CADesertRat
        AskWoody Plus

        You could also go to Settings>System>About and look at Windows Specifications.

        Don't take yourself so seriously, no one else does 🙂
        4 Win 10 Pro currently 1809 (3 Desktops, 1 Laptop).

    • #1665314 Reply

      CADesertRat
      AskWoody Plus

      If you have Win 10 Pro

      For some reason it looks like the Pause is missing so (just a suggestion), try going to search and type cmd and in the search box when cmd shows up, right click and choose Run as Administrator. OK the box to allow and then type in chkdsk /f then enter, then type Y and then enter and close it out and reboot to see if it will fix the missing pause in advanced. It doesn’t take long so it’s worth a try. It has fixed a few installation problems for me.

      Hope this helps

      Don't take yourself so seriously, no one else does 🙂
      4 Win 10 Pro currently 1809 (3 Desktops, 1 Laptop).

    • #1679454 Reply

      berniec
      AskWoody Plus

      Thanks for the help.  I’ve got the policies fixed.   but the comments about why my /pro seems to be defective has me worried.  I checked winver:

      winver

      and it is odd: on win7 it says “windows 7 professional”   This doesn’t but it does say “This Windows Pro operating system…”   also, I did have the group policy editor and had no trouble tweaking policies, and at least on win7 that only came in the non-Home versions.  So now i dunno..  But in any event I think I’m set now.

      I note that patch tuesday went by and there’s no sign of any updates for my win10 system.  So I guess I’ll find out what happens when the next round of updates makes it to my system

      Attachments:
    • #1680281 Reply

      woody
      Da Boss

      Looks like you have Win10 Pro 1809.

      You need to scroll down farther in the Advanced Settings page, and set it to look like what I describe every month in Computerworld. Here’s the latest:

      https://www.computerworld.com/article/3394684/patches-are-coming-tomorrow-make-sure-windows-update-gets-locked-down.html

      (PKCano’s description above is entirely accurate. You can’t one-click Pause in 1809. But you should read the Computerworld and MS-DEFCON references!) 🙂

      1 user thanked author for this post.
    • #1680932 Reply

      Alex5723
      AskWoody Plus

      I note that patch tuesday went by and there’s no sign of any updates for my win10 system

      Go to Windows update history to list the latest updates installed (just type in search box : update history.

    • #1689403 Reply

      woody
      Da Boss

      (Facepalm. Ouch.)

      I apologize. I’ve had a lot on my plate lately, but that’s no excuse. @berniec please forgive me for handing you a stock answer when I should’ve been looking at the evidence you provided.

      On reflection (thx, @pkcano), here’s what I see. You have Win10 Pro 1809. In the Windows Update settings, Advanced Options box, you do not have a section marked “Choose when updates are installed.” That seems to be the crux of the problem.

      I’ve searched high and low and found several cases where “Choose when updates are installed” has gone missing. I don’t see any Group Policy setting that removes that section entirely – only policies that gray them out.

      Ends up that this is a known bug in Win10 1809. On the MS Answers Forum, “Sumit (Independent Advisor)” says:

      This is being reported by many that options disappear after a clean install.

      Please add feedback and share the feedback with me so that I can escalate:

      https://support.microsoft.com/en-in/help/27932/

      Sumit

      Predictably, the Feedback Sumit refers to is just the general Feedback page. I went into Feedback (which is its own UWP app – ugh – not accessible to, or indexed by, Google Search) and found a few hits on

      missing “choose when updates are installed”

      but, again predictably, there’s very little there.

      So here’s what I figure: Your system’s screwed up. I don’t know why. The only solution I can think of is to do a non-destructive “Reset this PC” (Start > Settings > Update & Security > Recovery) but I have no idea if that’ll work or not.

      So again apologies. Please keep us updated on your results!

      1 user thanked author for this post.
    • #1691375 Reply

      berniec
      AskWoody Plus

      AHA!! I think I’ve discovered my problem. In the ComputerWorld article you say to run settings>Update as *administrator*. I *never* run as administrator and so what I see [and showed you all] is what the non-admin user sees. I just switched to my admin account and sure enough: there are a *ton* of settings for update, including, I expect now I can do the settings that everyone has recommended.

      I also see that when I check the settings [either admin or non] it warns me that “your organization has set some policies to manage updates. I thought i only tweaked two, but it lists three: Notify to download updates, Exclude Drivers and Set automatic update options.

      Also, at least for now the options seem to be just right: I got a notification that there was an update pending: it was a defender update and just like in win7 I got to *tell* win10 to do the update. YAY!

      Side question that doesn’t really matter but since I rarely [read “essentially never”] run as admin, I’m wondering; it is possible to get UAC to let me get to settings>Update? I couldn’t find a way.

      Thanks! … off to set the admin options on update… /b\

      4 users thanked author for this post.
      • #1691408 Reply

        PKCano
        Da Boss

        When you make changes in Group Policy, you will get the “your organization has set some policies to manage updates” at the top of the Windows Update screen. It is a warning/list of the changes made in GP.

        1 user thanked author for this post.
      • #1692178 Reply

        woody
        Da Boss

        ACH! Yes, absolutely, you’re quite correct.

    • #1706036 Reply

      wavy
      AskWoody Plus

      On the 1903 ver does use of the ‘pause’ cause a forced update when the pause period ends as the one is 1803?

      🍻

      Just because you don't know where you are going doesn't mean any road will get you there.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: Configuring update on win10/pro

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.