News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • MS-DEFCON 2: Make sure automatic update is blocked

    Home Forums AskWoody blog MS-DEFCON 2: Make sure automatic update is blocked

    This topic contains 26 replies, has 16 voices, and was last updated by  Latka 1 month, 1 week ago.

    • Author
      Posts
    • #2016896 Reply

      woody
      Da Boss

      Tomorrow’s Patch Tuesday. Now’s a good time to double-check and make sure the patches won’t hit you the minute they roll out the Windows Update chute.
      [See the full post at: MS-DEFCON 2: Make sure automatic update is blocked]

      2 users thanked author for this post.
    • #2016911 Reply

      The Surfing Pensioner
      AskWoody Plus

      But you’ve forgotten to move the little MS Patch Defence Condition button!

      1 user thanked author for this post.
      • #2016916 Reply

        Paul T
        AskWoody MVP

        ‘Cause it’s only Monday.  🙂

        cheers, Paul

    • #2016921 Reply

      EP
      AskWoody_MVP

      the MS-DEFCON level will be moved back down to 2 on Tuesday Dec. 10

      • #2016961 Reply

        WildBill
        AskWoody Plus

        The shield’s been changed today. Thanks, @woody… *chef’s kiss*!

        Windows 8.1, 64-bit, back in Group A... & leaning toward Windows 10 V1909. As long as it's a Lot Less Buggy!
        Wild Bill Rides Again...

    • #2016980 Reply

      anonymous

      Only have the Nov 2019 Sec Only Patches installed on 1 out of 4 of my Laptops as the second oldest laptop would not boot into Windows after the Nov Win 7 Sec Only patch was installed and not being applied on failed restart(I suspect MSE is causing the issue). So currently I can not even think about Dec 2019’s patches until I can get Nov’s patching finished on 3 out of 4 of my Windows 7/64 bit laptops.

      Fortunately it’s only DEFCON2 and the new year may arrive before Dec 2019’s patches rate at least DEFCON3 so plenty of time to try and get the Nov 2019 update issues fixed.

    • #2017039 Reply

      rhp52
      AskWoody Lounger

      There is a ‘metered connection” setting in Windows Update/ Advanced Options. Should this also be set to metered connection/ on if you also set metered connection to on with your internet adapter?

      Win 10 Pro v.1903

      • #2017046 Reply

        PKCano
        Da Boss

        “Download updates over metered connections” in Advanced options should be OFF
        You don’t want to download over metered connections.

        1 user thanked author for this post.
        • #2017047 Reply

          rhp52
          AskWoody Lounger

          Thank you, PK.  Do we know if ‘pausing’ takes precedence over group policy changes, or vice versa? I’m confused after reading Woody’s article. Thank you for your patience.

          Win 10 Pro v.1903

          • This reply was modified 1 month, 2 weeks ago by  rhp52.
          • #2017049 Reply

            PKCano
            Da Boss

            For Win10 Pro, these are the settings I use and why I chose them.
            And here is a pic of the Group Policy setting.
            I don’t use Pause at all.
            I have never been forced for any update.

            1 user thanked author for this post.
            • #2017066 Reply

              rhp52
              AskWoody Lounger

              Thanks again….appreciate you taking the time to help. I’ve never had problems that i couldn’t figure out until  Windows Update in Win 10. Confusing!

              Win 10 Pro v.1903

    • #2017129 Reply

      abbodi86
      AskWoody_MVP

      up until a few months ago, clicking “Check for updates” would automatically install everything Microsoft had backed up for your machine, without giving you a chance to peruse the items on offer. It now appears as if Microsoft has seen the error of its ways, and no longer crams everything on your machine

      When did this change?
      in my late tests, clicking the button still crams everything 🙂

      • #2017217 Reply

        ch100
        AskWoody_MVP

        To be more accurate, there are Optional Updates which are offered and visible with third-party tools like WUMT, but not installed when clicking on “Check for updates”. One such example is Silverlight.
        However, this is not changed behaviour. 🙂

        • #2017455 Reply

          abbodi86
          AskWoody_MVP

          I never use Microsoft Update (i.e. the one for Office and Silverlight.. etc…)

          1 user thanked author for this post.
    • #2017359 Reply

      bbearren
      AskWoody MVP

      Seeker/cannon fodder report: nothing offered to my desktop, NAS or Dell Latitude E5420.

      Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
      "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
      "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

    • #2017465 Reply

      bbearren
      AskWoody MVP

      Seeker report:

      KB4533002 Cumulative Update for .NET Framework 3.5 and 4.3 for Windows 10 Version 1909 for x64
      KB4530684 Cumulative Update for Windows 10 Version 1909 for x64-baseed Systems
      KB4532441 Windows Autopilot update for Windows 10 Version 1909 for x64-baseed Systems

      I have not configured my desktop for Windows Autopilot, but I did get the update.  On the other hand, this installation was born about ten years ago as a clean install of Windows 7 Ultimate (no upgrade path from XP, and I skipped Vista entirely), upgraded to Windows 8 Pro, then 8.1 Pro, and now Windows 10 Pro 1909.

      So far, so good.

      Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
      "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
      "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

    • #2017474 Reply

      bbearren
      AskWoody MVP

      I have not configured my desktop for Windows Autopilot, but I did get the update.

      On the other hand, I checked HKLM\SOFTWARE\Microsoft\Provisioning\Diagnostics\AutoPilot\IsAutoPilotDisabled and it has a value of 0, which would suggest that perhaps it is enabled.

      Create a fresh drive image before making system changes/Windows updates, in case you need to start over!
      "When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns
      "Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

    • #2017473 Reply

      hubert_sk_t
      AskWoody Plus

      They’re pushing people off 1809 harder it seems. I swear I hid a Feature Update to 1903 before, and now it’s back!

      • #2017488 Reply

        abbodi86
        AskWoody_MVP

        Feature Updates get renewed each month (each one represent the latest CU for 1903)

    • #2017535 Reply

      deanwmn
      AskWoody Plus

      Wow! For the first time in, like, forever I don’t have to worry about Patch Tuesday!  I don’t have anything to patch! I’m currently using my Kindle HD10 with a keyboard they came out with not long ago and I fortunately had the foresight to buy.  My family all tell me to get a Mac but the cost is big! Plus none of my peripherals would work on it.  So after searching online, asking friends, etc (including on this forum) I’ve pretty much settled on a Google Chrome Pixelbook.  This little Kindle has been a great alternative, but I keep reaching for the mouse! Plus bigger would be better than the 10 inches this is. Thanks for all your help and I intend to stay on here just to keep up on things, but it’s SO nice not to worry about Microcrud’s updates!

    • #2017547 Reply

      ifubiok
      AskWoody Plus

      Used your ComputerWorld article to defer my Win10 1903 updates and was able to defer 35 days rather than the 21 days shown in the article.

      1 user thanked author for this post.
      • #2018869 Reply

        Latka
        AskWoody Plus

        Same thing observed on Win10 Home 1903. I punched Pause Updates 5 times and deferred updates until January 16.

        • This reply was modified 1 month, 1 week ago by  Latka.
    • #2018676 Reply

      Linda2019
      AskWoody Plus

      Windows 10 1903 here – Anyone have any tips on how to stop the automated process of installation once you click the “resume” button?  It would be great to review the information about the updates before Windows 10 does it’s thing.

      What happens if I don’t pause it?  will it update without me clicking “check for updates?”  The reason I ask this is because I have seen screenshots of other people having the pending updates listed (so they can review it before installing), but they didn’t click “check for updates”.  wondering which way is better for me.

      • #2018698 Reply

        PKCano
        Da Boss

        If you use Pause, when the Pause time is up, you have to install whatever is pending before you can Pause again.

        • #2018765 Reply

          Linda2019
          AskWoody Plus

          Thank you.   I was wondering if .. I didn’t pause, would Windows updates would automatically update if I don’t hit “check for updates”?

          • #2018779 Reply

            PKCano
            Da Boss

            If you have Win10 Home, you can set your network to metered connections and (supposedly) MS will not download the large updates until you remove the “metered.” You can also use wushowhide to hide the updates. These two things in addidion to Pausing.

            If you have Win10 Pro, you can set deferral days in Windows Update under “Advanced Settings” and use Group Policy to prevent immediate download. That in addition to the settings you can use in Win10 Home.

        • #2018876 Reply

          Latka
          AskWoody Plus

          With Win10 Home 1903, when I press “Resume updates”, it immediately checks for updates and lists what’s available. At this point, if you have a metered connection, it says “Pending download.” There is a “Download” button available, but nothing further happens if you do not click the “Download” button and you are not using a metered connection.

          You then have the opportunity to run WuShowHide and hide the unwanted updates, or click “Download” for each offered update, one at a time.

          I don’t see much use for the new pause updates feature in Win10 Home 1903. In addition to pausing various unwanted updates, it also delays implementation of new Security Intelligence Updates for Windows Defender Antivirus and the Malicious Software Removal Tool updates.

           

          • This reply was modified 1 month, 1 week ago by  Latka.

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: MS-DEFCON 2: Make sure automatic update is blocked

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.