News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 2: Make sure automatic update is blocked

    Home Forums AskWoody blog MS-DEFCON 2: Make sure automatic update is blocked

    Viewing 12 reply threads
    • Author
      Posts
      • #2016896 Reply
        woody
        Da Boss

        Tomorrow’s Patch Tuesday. Now’s a good time to double-check and make sure the patches won’t hit you the minute they roll out the Windows Update chute.
        [See the full post at: MS-DEFCON 2: Make sure automatic update is blocked]

        2 users thanked author for this post.
      • #2016911 Reply
        The Surfing Pensioner
        AskWoody Plus

        But you’ve forgotten to move the little MS Patch Defence Condition button!

        1 user thanked author for this post.
        • #2016916 Reply
          Paul T
          AskWoody MVP

          ‘Cause it’s only Monday.  🙂

          cheers, Paul

      • #2016921 Reply
        EP
        AskWoody_MVP

        the MS-DEFCON level will be moved back down to 2 on Tuesday Dec. 10

        • #2016961 Reply
          WildBill
          AskWoody Plus

          The shield’s been changed today. Thanks, @woody… *chef’s kiss*!

          Windows 8.1, 64-bit, back in Group A... & leaning toward Windows 10 V2004. As long as it's a Lot Less Buggy!
          Wild Bill Rides Again...

      • #2016980 Reply
        anonymous
        Guest

        Only have the Nov 2019 Sec Only Patches installed on 1 out of 4 of my Laptops as the second oldest laptop would not boot into Windows after the Nov Win 7 Sec Only patch was installed and not being applied on failed restart(I suspect MSE is causing the issue). So currently I can not even think about Dec 2019’s patches until I can get Nov’s patching finished on 3 out of 4 of my Windows 7/64 bit laptops.

        Fortunately it’s only DEFCON2 and the new year may arrive before Dec 2019’s patches rate at least DEFCON3 so plenty of time to try and get the Nov 2019 update issues fixed.

      • #2017039 Reply
        rhp52
        AskWoody Plus

        There is a ‘metered connection” setting in Windows Update/ Advanced Options. Should this also be set to metered connection/ on if you also set metered connection to on with your internet adapter?

        Win 10 Pro v.1903

        • #2017046 Reply
          PKCano
          Da Boss

          “Download updates over metered connections” in Advanced options should be OFF
          You don’t want to download over metered connections.

          1 user thanked author for this post.
          • #2017047 Reply
            rhp52
            AskWoody Plus

            Thank you, PK.  Do we know if ‘pausing’ takes precedence over group policy changes, or vice versa? I’m confused after reading Woody’s article. Thank you for your patience.

            Win 10 Pro v.1903

            • This reply was modified 9 months, 3 weeks ago by rhp52.
            • #2017049 Reply
              PKCano
              Da Boss

              For Win10 Pro, these are the settings I use and why I chose them.
              And here is a pic of the Group Policy setting.
              I don’t use Pause at all.
              I have never been forced for any update.

              1 user thanked author for this post.
              • #2017066 Reply
                rhp52
                AskWoody Plus

                Thanks again….appreciate you taking the time to help. I’ve never had problems that i couldn’t figure out until  Windows Update in Win 10. Confusing!

                Win 10 Pro v.1903

      • #2017129 Reply
        abbodi86
        AskWoody_MVP

        up until a few months ago, clicking “Check for updates” would automatically install everything Microsoft had backed up for your machine, without giving you a chance to peruse the items on offer. It now appears as if Microsoft has seen the error of its ways, and no longer crams everything on your machine

        When did this change?
        in my late tests, clicking the button still crams everything 🙂

        • #2017217 Reply
          ch100
          AskWoody_MVP

          To be more accurate, there are Optional Updates which are offered and visible with third-party tools like WUMT, but not installed when clicking on “Check for updates”. One such example is Silverlight.
          However, this is not changed behaviour. 🙂

          • #2017455 Reply
            abbodi86
            AskWoody_MVP

            I never use Microsoft Update (i.e. the one for Office and Silverlight.. etc…)

            1 user thanked author for this post.
      • #2017359 Reply
        bbearren
        AskWoody MVP

        Seeker/cannon fodder report: nothing offered to my desktop, NAS or Dell Latitude E5420.

        Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
        "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
        "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

      • #2017465 Reply
        bbearren
        AskWoody MVP

        Seeker report:

        KB4533002 Cumulative Update for .NET Framework 3.5 and 4.3 for Windows 10 Version 1909 for x64
        KB4530684 Cumulative Update for Windows 10 Version 1909 for x64-baseed Systems
        KB4532441 Windows Autopilot update for Windows 10 Version 1909 for x64-baseed Systems

        I have not configured my desktop for Windows Autopilot, but I did get the update.  On the other hand, this installation was born about ten years ago as a clean install of Windows 7 Ultimate (no upgrade path from XP, and I skipped Vista entirely), upgraded to Windows 8 Pro, then 8.1 Pro, and now Windows 10 Pro 1909.

        So far, so good.

        Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
        "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
        "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

      • #2017474 Reply
        bbearren
        AskWoody MVP

        I have not configured my desktop for Windows Autopilot, but I did get the update.

        On the other hand, I checked HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\AutoPilot\IsAutoPilotDisabled and it has a value of 0, which would suggest that perhaps it is enabled.

        Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
        "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
        "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

      • #2017473 Reply
        hubert_sk_t
        AskWoody Plus

        They’re pushing people off 1809 harder it seems. I swear I hid a Feature Update to 1903 before, and now it’s back!

        • #2017488 Reply
          abbodi86
          AskWoody_MVP

          Feature Updates get renewed each month (each one represent the latest CU for 1903)

      • #2017535 Reply
        deanwmn
        AskWoody Lounger

        Wow! For the first time in, like, forever I don’t have to worry about Patch Tuesday!  I don’t have anything to patch! I’m currently using my Kindle HD10 with a keyboard they came out with not long ago and I fortunately had the foresight to buy.  My family all tell me to get a Mac but the cost is big! Plus none of my peripherals would work on it.  So after searching online, asking friends, etc (including on this forum) I’ve pretty much settled on a Google Chrome Pixelbook.  This little Kindle has been a great alternative, but I keep reaching for the mouse! Plus bigger would be better than the 10 inches this is. Thanks for all your help and I intend to stay on here just to keep up on things, but it’s SO nice not to worry about Microcrud’s updates!

      • #2017547 Reply
        ifubiok
        AskWoody Plus

        Used your ComputerWorld article to defer my Win10 1903 updates and was able to defer 35 days rather than the 21 days shown in the article.

        1 user thanked author for this post.
        • #2018869 Reply
          Latka
          AskWoody Plus

          Same thing observed on Win10 Home 1903. I punched Pause Updates 5 times and deferred updates until January 16.

          • This reply was modified 9 months, 2 weeks ago by Latka.
      • #2018676 Reply
        Linda2019
        AskWoody Plus

        Windows 10 1903 here – Anyone have any tips on how to stop the automated process of installation once you click the “resume” button?  It would be great to review the information about the updates before Windows 10 does it’s thing.

        What happens if I don’t pause it?  will it update without me clicking “check for updates?”  The reason I ask this is because I have seen screenshots of other people having the pending updates listed (so they can review it before installing), but they didn’t click “check for updates”.  wondering which way is better for me.

        • #2018698 Reply
          PKCano
          Da Boss

          If you use Pause, when the Pause time is up, you have to install whatever is pending before you can Pause again.

          • #2018765 Reply
            Linda2019
            AskWoody Plus

            Thank you.   I was wondering if .. I didn’t pause, would Windows updates would automatically update if I don’t hit “check for updates”?

            • #2018779 Reply
              PKCano
              Da Boss

              If you have Win10 Home, you can set your network to metered connections and (supposedly) MS will not download the large updates until you remove the “metered.” You can also use wushowhide to hide the updates. These two things in addidion to Pausing.

              If you have Win10 Pro, you can set deferral days in Windows Update under “Advanced Settings” and use Group Policy to prevent immediate download. That in addition to the settings you can use in Win10 Home.

          • #2018876 Reply
            Latka
            AskWoody Plus

            With Win10 Home 1903, when I press “Resume updates”, it immediately checks for updates and lists what’s available. At this point, if you have a metered connection, it says “Pending download.” There is a “Download” button available, but nothing further happens if you do not click the “Download” button and you are not using a metered connection.

            You then have the opportunity to run WuShowHide and hide the unwanted updates, or click “Download” for each offered update, one at a time.

            I don’t see much use for the new pause updates feature in Win10 Home 1903. In addition to pausing various unwanted updates, it also delays implementation of new Security Intelligence Updates for Windows Defender Antivirus and the Malicious Software Removal Tool updates.

             

            • This reply was modified 9 months, 2 weeks ago by Latka.
    Viewing 12 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 2: Make sure automatic update is blocked

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.