|
There are isolated problems with current patches, but they are well-known and documented on this site. |
I am running Win10 Pro 1511 with WU disabled. I used O&O Shutup to disable all the settings that it allows except for OneDrive and WindowsDefender. I am running it @every boot to monitor if any of the settings changed.
I have found that the setting of “Peer-to-peer update” is being enabled on a regular basis.
Anybody has any ideas how this happens? Is it related to Windows Defender or OneDrive, or is it just MS keeping it enabled for some nefarious intentions?
Microsoft reverts a lot of settings on installation of new “versions”. However I sense that’s not what you’re describing.
As a data point… I chose not to allow “peer to peer” updates through the Settings App long ago. I haven’t run O&O ShutUp10 in quite a long while, yet my choices still seem to be holding…
You did turn it off in the Settings App, right?
-Noel
Use what @PKCano posted and you will be OK… until it changes again 
Watch out for the new version and possible changes to DO.
There’s also a “portable” version of Spybot Anti-Beacon which I use on all my PCs instead of the normal, installable one:
https://forums.spybot.info/downloads.php?id=56
Noel,
Just curious, have you ever used the Registry and/or GPO method to disable DO?
Nope, just what I posted above. Never seemed to need anything more.
-Noel
I think more along the lines of “radosuaf”, I prefer the direct approach and the Registry more than GPO. It is interesting to see the various Trust focuses around a specific surgical focus point. 
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable
2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.
-----------------
If you open up GWX Control Panel and you right click on the little blue icon in the upper left corner, you can “save diagnostic data” then look at the results in a text file.
I don’t believe GWX CP is what shutting down your PC. To my knowledge that was never a function. The User Guide is accessible by a button on the lower left side and there is a tutorial on Mayfield’s website.
Crysta
Group Policy IS registry.
While DIRECT REGISTRY EDITING IS NOT SUPPORTED AND POTENTIALLY DANGEROUS unless instructed so by Microsoft via support or in an officially published article, Group Policy is fully supported and its effects can be easily reverted if it does not work as expected.
Is it “REALLY”, “ALWAYS”, are you really sure??? I know it is like proving a ‘Negative’ But I am under the impression that GPO does not always write in the Registry. GPO does have its own ‘cache’ that is preserved. As others have said about other things, in my travels, that they don’t always write in the Registry as far as the OS is concerned.
CH 100, I admit I am out of my depth, so I need to listen to people I feel have veracity, it is as simple as that. You do not have to, that is fine!!! I have tried changing something in the Registry that I knew at the time was connected to GPO. I wish I could remember more details. I can tell you this GPO was not changed. My changes stayed and GPO carried on doing its thing. What I was doing was very safe because like you have said: IT CAN BE DANGEROUS! There are serious discussions in MS about how long is GPO for this world or not. I don’t know what the outcome will be???? I just know I am very leery of putting to much STOCK in GPO. I know this subject really freaks out IT/Admin/DevOps people, like yourself, and I understand that.
Further more, the discussion is some times with Powershell people, there is a Module for Defender, look in the PS ISE. One can make settings on Defender that as I understand it writes in the Registry. GPO has similar setup that writes elsewhere. In W 10 trying to keep WD going somewhat like I wanted, setting up both came the closest to achieving that. For that I am not personally going in to the Registry Directly but through PS I will, especiall with a stock Module.
So CH 100, as I understand the Registry, it is the most direct way to adjust ones PC and yes IT COULD BE the most dangerous! Yes, I always know how to undo my adjustments. If that is not enough, there is my Registry Backup, and in the the end, my Image Backup! Yes, I have used both at these “Learning Times”
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable
2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.
-----------------
Crysta, here are the basics.
Windows and applications write in the registry and in AppData\Roaming or ProgramData when they are designed to write configuration files.
Group Policies write in the registry most of the time (“always” for making it simple) and the entries related to group policies take precedence over the regular registry entries. When a Group Policy is set to Not Configured, it removes the entry written in the Group Policy area of the registry and the regular registry entry applies again. There are exceptions, but for most purposes this is correct.
Locations:
Per-machine
HKEY_LOCAL_MACHINE\SOFTWARE\Policies (main)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies (secondary)
You will also find entries under the equivalent WOW6432Node on 64-bit machines, but those are only mirrors of the previous keys for backwards compatibility purpose and probably to be friendly with poorly written applications, not following correctly OS standards
Per-user
HKEY_CURRENT_USER\SOFTWARE\Policies (main)
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies (secondary)
The cache which you mentioned is not relevant for how the group policies are applied, being a location for the editor and for other purposes, like keeping a history of policies applied.
You may wonder why they are called “Group” Policies.
This is a name coming from Active Directory where the policies were originally intended to be filtered based on groups of users. Currently the recommendation is to filter primarily based on OU (Organizational Unit) and not on Security Groups, but the name stuck.
I have no problem with proposing one small set of registry tweaks or another, but when you list one page of tweaks, a lot of users may implement them and after breaking their computers, blame Microsoft telemetry for it and end up reinstalling (if they can find the original software). It is too easy to have Windows getting out of control by changing registry keys and losing track of the changes implemented.
I appreciate that all your tweaks come with the recommendation to backup and backup again, but please understand that there are some users reading here who are concerned even with changing a small setting like System Restore or Page File Size which are exposed in the GUI.
The registry scripts are not for them, but they may not know it.
Since you said this, do you happen to know what is the registry key that GWX Control panel used to detect Win10 files on Win7 machines?
Ah, Some of the Registry Keys I didn’t put into my Help Post because I didn’t think they were relevant. I have never used @SGGRC’s “Never 10” or “GWX Control panel” so I have never Scanned the Registry to see their affects. That will be something you will need to do with “Registry Scanner” from NirSoft, yourself.
Be advised I have never done REG WU W 10 GWX.exe Enable.reg, just in case the same approach is used in the future.
What I can do is show you my Adjustments for W 8.1 Pro, that I gleaned from various places, including Microsoft, so that you can see the Keys in that:
REG WU W 10 GWX.exe Disable.reg
Windows Registry Editor Version 5.00
[-HKEY_CLASSES_ROOT\GWX\shell\open\command]
[-HKEY_CLASSES_ROOT\ms-gwx\shell\open\command]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\GWX\shell\open\command]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ms-gwx\shell\open\command]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{18abebc9-83ec-435f-8f15-6d1e9187c999}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX]
“DisableGWX”=dword:00000001
REG WU W 10 GWX.exe Enable.reg
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\GWX\shell\open\command]
@=”C:\\Windows\\System32\\GWX\\GWX.exe %1?
[HKEY_CLASSES_ROOT\ms-gwx\shell\open\command]
@=”C:\\Windows\\System32\\GWX\\GWX.exe %1?
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\GWX\shell\open\command]
@=”C:\\Windows\\System32\\GWX\\GWX.exe %1?
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ms-gwx\shell\open\command]
@=”C:\\Windows\\System32\\GWX\\GWX.exe %1?
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{18abebc9-83ec-435f-8f15-6d1e9187c999}]
@=”Microsoft-Windows-GWX-Ins”
“ResourceFileName”=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,\
00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\
5c,00,47,00,57,00,58,00,5c,00,47,00,57,00,58,00,2e,00,65,00,78,00,65,00,00,\
00
“MessageFileName”=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,\
6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,\
00,47,00,57,00,58,00,5c,00,47,00,57,00,58,00,2e,00,65,00,78,00,65,00,00,00
“Enabled”=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{18abebc9-83ec-435f-8f15-6d1e9187c999}\ChannelReferences]
“Count”=dword:00000002
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{18abebc9-83ec-435f-8f15-6d1e9187c999}\ChannelReferences]
@=”Microsoft-Windows-GWX-Ins/Operational”
“Id”=dword:00000010
“Flags”=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{18abebc9-83ec-435f-8f15-6d1e9187c999}\ChannelReferences\1]
@=”Microsoft-Windows-GWX-Ins/Debug”
“Id”=dword:00000011
“Flags”=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX]
“DisableGWX”=dword:00000000
That should get you started in your investigation.
Don’t forget to BACKUP, BACKUP YOUR IMAGE, BACKUP YOUR REGISTRY. See Tools for related Posts.
I have continued to use it as a precaution and when I stream some movies from the Net it tends to detect Win10 files and the system shuts down, which is very weird. I contacted the author, but he has not replied.
Is there anything that could affect that other than MS?
I suppose it is possible, because the software sees the Stream, Caches, other files that it is confusing as Problematic and potentially a taking over, that it is protecting you from. On the other hand, what about the software you are streaming through, is it problematic??? I have difficult time thinking it’s MS’s problem??? Unless, of course there is a conflict between software and the OS/patches??? It is still the 3 rd Parties problem.
Hope that helps….
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable
2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.
-----------------
OKAY Anon,
Have you considered a LIMITED BOOT. This is different than a Safe Boot. In a Limited Boot, one wants to limit thing as stably as possible but to only the the software that you need to accomplish exactly what you want BUT doing it stably. It requires you to know your necessary control software but focused on the tasks at hand. For example if you have a separate USB controller(I have one for USB 3 or Graphics, you don’t want to turn them off(they maybe are drivers only{don’t worry about} or driver PLUS other software). Look the Pic over, it should get you started. Hiding MS services is a good idea(keeps them running) but make sure you don’t turn off 2 rd Party sevices you need or they won’t work right. Once you have things running successfully, then start turning things on one at a time. don’t leave to many turned on or it makes things harder to debug.
Sysinternals has Tools and Updates in there Suite for this if you are familiar with them. I also use a light app similar to 2 or 3 of Mark’s called “System Explorer” that I like much better that Task Manager.
I haven’t done a write up on it but one can search for it.
Hope this gets you down the road a ways….
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable
2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.
-----------------
OKAY,
Somebody else will benefit for the Post…..
Enjoy your PC the way it is!
IT Admin for ones own PC, takes work, lots of it and sometimes many, many HOURS, and learning….
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable
2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.
-----------------
I run GWX Control Panel, O&O Shutup and Spybot Anti-Beacon.
That is WAAAY overkill. GWX Control Panel was NEVER meant for Win10. It was a preventative for Win7 & Win8.1 to keep from getting hijacked by MS to install Win10. It was NEVER meant to run on Win10 at all.
UNINSTALL IT. You have to take it out of monitor mode (a button on the popup) first.
Not everyone on this site is a geek like you and me or aims to become one. ?
Most only want to have their systems patched correctly and working well.
Yes, I agree,
But that does not fit in this world we live in, with these boxes some of the time. It would be very very nice if for those people PC/Workstation were truly utilitarian and Microsoft’s persistent approach really worked flawlessly, or would it? You might be out of a job??? However do you have anything to worry about….
I have been saying this for along time to individual “Unmanaged” PC users/owners, you either learn to be your own IT Admin or be prepared to spend allot of money keeping a PC going. They are either going to have to find an IT Admin of reputable nature and expertise or buy another PC.
Thus, in walks Tablets/low cost laptops/Smartphones/ChromeBooks which now meet most of those peoples needs, most of the time.
I would think allot of people are here for the exposure, and a place to learn in case there PC inducts them into the “School of Hard Knocks”, as well as what you have exclaimed, not to try everything they see on these pages.
Take care…..
--------------------------------------
1. Tower Totals: 2xSSD ~512GB, 2xHHD 20 TB, Memory 32GB
SSDs: 6xOS Partitions, 2xW8.1 Main & Test, 2x10.0 Test, Pro, x64
CPU i7 2600 K, SandyBridge/CougarPoint, 4 cores, 8 Threads, 3.4 GHz
Graphics Radeon RX 580, RX 580 ONLY Over Clocked
More perishable
2xMonitors Asus DVI, Sony 55" UHD TV HDMI
1. NUC 5i7 2cores, 4 Thread, Memory 8GB, 3.1 GHz, M2SSD 140GB
1xOS W8.1 Pro, NAS Dependent, Same Sony above.
-----------------
DO = Delivery Optimization also known as WUDO = Windows Update DO
https://www.askwoody.com/forums/topic/delivery-optimization-and-bg-processes/#post-93950
DO = Delivery Optimization also known as WUDO = Windows Update DO
https://www.askwoody.com/forums/topic/delivery-optimization-and-bg-processes/#post-93950
@ch100; Searched Google for ‘DO’ – no joy. Searched google for ‘WUDO’ & it was first hit. Thanks again for ur reply.
You may find this Microsoft official information most useful.
This information is what I consider as the authoritative reference about this subject, as difficult to understand as it seems to be.
Unfortunately there is nothing better published about this subject as far as I know and this is subject to change without much notice when the next Windows 10 Upgrade – Creators Edition – will be released.
https://technet.microsoft.com/en-us/itpro/windows/manage/waas-delivery-optimization
f you edit Group Policies (gpedit.msc), under Computer ConfigurationAdministrative TempletsWindows ComponentsDelivery Optimization: enable Download Mode. Any choice but 1, 2, and 3 will keep you away from peer-to-peer. I use 100 which bypasses DO and uses BITS. But 0 and 99 are also choices.
Double click on “Download Mode” on the right.
A box pops up – Select “Enable” radio button and 100 in the pulldown below.
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Notifications
