If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Rate Thread | Display Modes |
#1
|
|||
|
|||
Windows Update in Windows 10: how to disable?
|
Ads |
#2
|
|||
|
|||
Windows Update in Windows 10: how to disable?
On 30/01/2018 01:40, Evgenii Sputnik wrote:
Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii By simply disabling the Windows update from Services App. https://i.imgur.com/XFNFlYu.png https://i.imgur.com/XFNFlYu.png Do you know how to do it? I assume you member of Russia's elite force specialising in sabotaging elections all over the world and to spread fake news so you should know about this. Good luck but you are allowed to ask a supplementary question for £10.00 (GBP). -- With over 600 million devices now running Windows 10, customer satisfaction is higher than any previous version of windows. |
#3
|
|||
|
|||
Windows Update in Windows 10: how to disable?
On 1/29/2018 8:40 PM, Evgenii Sputnik wrote:
Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii I don't know how to disable updates. While there are things you can do, I am not sure if there is a way to NEVER receive another update. The only why I can see is never hook the computer to the network. Hopefully MS will build in something in their update system that will prevent updates on system that have limited storage or other restrictions. My recommendation is to add storage. Can you add an SD card to supplement the main storage? I think without it you have a computer with an OS and little else. I had a similar problem with my 32 bit tablet with 32 GB of main storage. I had expanded it with a 32GB SD card, and had installed several programs in the C: disk. It took me months and many tries to get 1709 to install. To do this I finally had to uninstall all of the programs that I had added. With a basic system I had about 17GB of free storage on the 32GB disk. I am in the process of reinstalling the my programs. I have reviewed what programs that I absolutely need on the Tablet, and if possible installed them on the SD drive. Hopefully the next update can install in the space available. -- 2018: The year we learn to play the great game of Euchre bit |
#4
|
|||
|
|||
Windows Update in Windows 10: how to disable?
|
#5
|
|||
|
|||
Windows Update in Windows 10: how to disable?
Evgenii Sputnik wrote:
Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii How about rename wuaueng.dll wuaueng.dll.bak By doing that, you're not deleting the hard link between WinSXS and System32 file names. Later, if you want to turn it back on, it would be rename wuaueng.dll.bak wuaueng.dll I think I tested that in a VM at some point, and the Windows Update "spinning balls" just spin forever. The wuaueng.dll, may be the code file for the wuauserv service which is one of fifteen services in a certain SVCHOST. Thanks to Microsoft picking different names at every level for stuff, it's pretty hard to trace which file does what. You can try Sysinternals Process Explorer, run that as Administrator, and probe the svchost for details. That's if you want to satisfy your curiosity as to whether that's the right target to attack or not. The definition of the service in Services panel, may also hold some clues. I just rename these things from Linux. As there are less permissions to worry about there. What Linux lacks, is handling of reparse points, so some things now cannot be touched from there. The other thing Linux doesn't like, is if the C: drive is "hibernated" at the time you try to access that partition. Ideally you want Fast Boot turned off, before using Linux on it. Fast Boot can be interpreted as Hibernation. mv wuaueng.dll wuaueng.dll.bak You can try using the Win10 installer DVD or a Win10 emergency boot CD, and using Command Prompt from there, to do the rename if you want. That's another path to doing it. Permissions still work in such an environment. It's quite possible you're administrator when doing it that way... I don't recommend *deleting* files. Rename them for this sort of work. If you delete that file, you're going to need to learn how to make hard links, or you'll need to use sfc /scannow to repair it. Turning off "Windows Update" service does not stop it. USOSVC will use a scheduled task to turn it back on. If the file is renamed, there is less chance of that happening. Microsoft some day *could* auto-repair the whole freaking OS, so it's not a given that we will have this option in the future. If they wanted to, they could harden the OS to the point that only disconnecting the network cable would work. You don't want to damage any more than that, as things like BITS could be used for updating Apps from the App Store, or supporting some Powershell calls. You only want to try for the actual Windows Update service, for least damage. I don't even know if .msu files (downloaded from catalog.update.microsoft.com() will work, once you stick a fork in that file. It's pretty hard to come up with a file level operation that is side-effect free. Paul |
#6
|
|||
|
|||
Windows Update in Windows 10: how to disable?
|
#7
|
|||
|
|||
Windows Update in Windows 10: how to disable?
"Paul" wrote in message news Evgenii Sputnik wrote: Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii How about rename wuaueng.dll wuaueng.dll.bak By doing that, you're not deleting the hard link between WinSXS and System32 file names. Later, if you want to turn it back on, it would be rename wuaueng.dll.bak wuaueng.dll I think I tested that in a VM at some point, and the Windows Update "spinning balls" just spin forever. The wuaueng.dll, may be the code file for the wuauserv service which is one of fifteen services in a certain SVCHOST. Thanks to Microsoft picking different names at every level for stuff, it's pretty hard to trace which file does what. You can try Sysinternals Process Explorer, run that as Administrator, and probe the svchost for details. That's if you want to satisfy your curiosity as to whether that's the right target to attack or not. The definition of the service in Services panel, may also hold some clues. I just rename these things from Linux. As there are less permissions to worry about there. What Linux lacks, is handling of reparse points, so some things now cannot be touched from there. The other thing Linux doesn't like, is if the C: drive is "hibernated" at the time you try to access that partition. Ideally you want Fast Boot turned off, before using Linux on it. Fast Boot can be interpreted as Hibernation. mv wuaueng.dll wuaueng.dll.bak You can try using the Win10 installer DVD or a Win10 emergency boot CD, and using Command Prompt from there, to do the rename if you want. That's another path to doing it. Permissions still work in such an environment. It's quite possible you're administrator when doing it that way... I don't recommend *deleting* files. Rename them for this sort of work. If you delete that file, you're going to need to learn how to make hard links, or you'll need to use sfc /scannow to repair it. Turning off "Windows Update" service does not stop it. USOSVC will use a scheduled task to turn it back on. If the file is renamed, there is less chance of that happening. Microsoft some day *could* auto-repair the whole freaking OS, so it's not a given that we will have this option in the future. If they wanted to, they could harden the OS to the point that only disconnecting the network cable would work. You don't want to damage any more than that, as things like BITS could be used for updating Apps from the App Store, or supporting some Powershell calls. You only want to try for the actual Windows Update service, for least damage. I don't even know if .msu files (downloaded from catalog.update.microsoft.com() will work, once you stick a fork in that file. It's pretty hard to come up with a file level operation that is side-effect free. Paul Paul, Curious as to why you recommend renaming wuaueng.dll and not just go into services.msc and Disable WindowsUpdate service. This works for Win10 Home and Win10 Pro versions. We had a real sh*t storm over the weekend at a clients location and 13 out of 20 systems got borked because of the recent updates. Those that weren't were ones I already gotten to and Paused/Delayed updates until mid Feb (Win10 Pro systems). I was able to recover each of the affected systems with a quick restore point recovery and then I've *temporarily* disabled windows update service. I've rebooted the systems to see if Win10 would somehow magically turn the service back on and so far it hasn't. Tried updating and I get a spinning arrow, then it times out saying there was an error, try later. So the disabling appears to be working fine. Note that Windows Defender will still get definition updates even though WindowsUpdate service is disabled. There is some disagreement on that point and even MS says ii gets updates via the update service. But.... I disabled windows update service two days ago and just verified the definition updates on several systems are current as of Jan 30 and Windows Defender shows it happy with everything being up to date. Bob S. |
#8
|
|||
|
|||
Windows Update in Windows 10: how to disable?
Bob_S wrote:
"Paul" wrote in message news Evgenii Sputnik wrote: Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii How about rename wuaueng.dll wuaueng.dll.bak By doing that, you're not deleting the hard link between WinSXS and System32 file names. Later, if you want to turn it back on, it would be rename wuaueng.dll.bak wuaueng.dll I think I tested that in a VM at some point, and the Windows Update "spinning balls" just spin forever. The wuaueng.dll, may be the code file for the wuauserv service which is one of fifteen services in a certain SVCHOST. Thanks to Microsoft picking different names at every level for stuff, it's pretty hard to trace which file does what. You can try Sysinternals Process Explorer, run that as Administrator, and probe the svchost for details. That's if you want to satisfy your curiosity as to whether that's the right target to attack or not. The definition of the service in Services panel, may also hold some clues. I just rename these things from Linux. As there are less permissions to worry about there. What Linux lacks, is handling of reparse points, so some things now cannot be touched from there. The other thing Linux doesn't like, is if the C: drive is "hibernated" at the time you try to access that partition. Ideally you want Fast Boot turned off, before using Linux on it. Fast Boot can be interpreted as Hibernation. mv wuaueng.dll wuaueng.dll.bak You can try using the Win10 installer DVD or a Win10 emergency boot CD, and using Command Prompt from there, to do the rename if you want. That's another path to doing it. Permissions still work in such an environment. It's quite possible you're administrator when doing it that way... I don't recommend *deleting* files. Rename them for this sort of work. If you delete that file, you're going to need to learn how to make hard links, or you'll need to use sfc /scannow to repair it. Turning off "Windows Update" service does not stop it. USOSVC will use a scheduled task to turn it back on. If the file is renamed, there is less chance of that happening. Microsoft some day *could* auto-repair the whole freaking OS, so it's not a given that we will have this option in the future. If they wanted to, they could harden the OS to the point that only disconnecting the network cable would work. You don't want to damage any more than that, as things like BITS could be used for updating Apps from the App Store, or supporting some Powershell calls. You only want to try for the actual Windows Update service, for least damage. I don't even know if .msu files (downloaded from catalog.update.microsoft.com() will work, once you stick a fork in that file. It's pretty hard to come up with a file level operation that is side-effect free. Paul Paul, Curious as to why you recommend renaming wuaueng.dll and not just go into services.msc and Disable WindowsUpdate service. This works for Win10 Home and Win10 Pro versions. We had a real sh*t storm over the weekend at a clients location and 13 out of 20 systems got borked because of the recent updates. Those that weren't were ones I already gotten to and Paused/Delayed updates until mid Feb (Win10 Pro systems). I was able to recover each of the affected systems with a quick restore point recovery and then I've *temporarily* disabled windows update service. I've rebooted the systems to see if Win10 would somehow magically turn the service back on and so far it hasn't. Tried updating and I get a spinning arrow, then it times out saying there was an error, try later. So the disabling appears to be working fine. Note that Windows Defender will still get definition updates even though WindowsUpdate service is disabled. There is some disagreement on that point and even MS says ii gets updates via the update service. But.... I disabled windows update service two days ago and just verified the definition updates on several systems are current as of Jan 30 and Windows Defender shows it happy with everything being up to date. Bob S. How do we know what capabilities the USOSVC has ? It's possible for a scheduled task to go around switching stuff on if it wants, on the next reboot. As I indicated, even my method isn't foolproof, when the day comes that Microsoft makes a "self-repairing OS". And they could do that quite easily. They have all the tools to put-back things that users remove or rename. One thing Windows is missing, is an "immutable" bit, which is used on other OSes for laying a trap for OS stuff. For example, storing a file where a folder of the same name normally goes, then setting the immutable bit on it. That has been used to foil the installation of unwanted things. Renaming files takes away the starting material. Like removing kindling from a fireplace, leaving firebugs with only clinkers to use to start a fire. But the trick with removing starting materials, is to not remove anything which is shared by more than one process. Which is why I didn't give instructions to bludgeon qmgr (BITS etc). As there may be more than one thing you value, which relies on BITS for downloads. Paul |
#9
|
|||
|
|||
Windows Update in Windows 10: how to disable?
Evgenii Sputnik wrote:
Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii Using this as start point you could postpone updates: https://www.windowscentral.com/how-d...our-pc-and-why At present I've blocked all updates until 6th March, while I try selected uninstalls (largely in vain) or decide whether to unblock, or as a last resort a System Restore. Terry, East Grinstead, UK |
#10
|
|||
|
|||
Windows Update in Windows 10: how to disable?
On 1/31/2018 9:19 AM, Terry Pinnell wrote:
Evgenii Sputnik wrote: Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii Using this as start point you could postpone updates: https://www.windowscentral.com/how-d...our-pc-and-why At present I've blocked all updates until 6th March, while I try selected uninstalls (largely in vain) or decide whether to unblock, or as a last resort a System Restore. Terry, East Grinstead, UK This .reg file seems to be the best currently-available, easily-implemented in win10 pro (have no idea if it works in home) patch that allows pausing updates for up to a year: ---------------------------------------------------- Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdat e\UX\Settings] "FlightSettingsMaxPauseDays"=dword:0000016d ------------------------------------------------------ Problem still remains that, if you need anything at all from windows update, you have to turn them back on and you will be inundated with all the pent-up updates. 32GB is limiting. I tripped over a MS link that claimed you could use external drive space during an update, but I didn't read it. You can gain a little space by turning off hibernation... powercfg -h off The downside is the endless series of massive updates. I had updates blocked since v1511. I inserted the v1709 DVD and tried an in-place upgrade. Not a chance. The damn thing did update after update for 1511, then an upgrade to v1703, then update after update for 1703 then an upgrade to v1709, then update after update for 1709. Started at 2PM. Finally got my computer back to usable at 4AM next morning. I'm afraid to ask how much internet data I used. Another thing I learned the hard way is that after you download updates, you can not defer installing them. You can defer the REBOOT that installs them. If you have to turn off your computer for any reason, you're stuck with "don't turn off your computer...". Hope you're not in a hurry to do anything on your system. Are we having fun yet? |
#11
|
|||
|
|||
Windows Update in Windows 10: how to disable?
"Paul" wrote in message news Bob_S wrote: "Paul" wrote in message news Evgenii Sputnik wrote: Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii How about rename wuaueng.dll wuaueng.dll.bak By doing that, you're not deleting the hard link between WinSXS and System32 file names. Later, if you want to turn it back on, it would be rename wuaueng.dll.bak wuaueng.dll I think I tested that in a VM at some point, and the Windows Update "spinning balls" just spin forever. The wuaueng.dll, may be the code file for the wuauserv service which is one of fifteen services in a certain SVCHOST. Thanks to Microsoft picking different names at every level for stuff, it's pretty hard to trace which file does what. You can try Sysinternals Process Explorer, run that as Administrator, and probe the svchost for details. That's if you want to satisfy your curiosity as to whether that's the right target to attack or not. The definition of the service in Services panel, may also hold some clues. I just rename these things from Linux. As there are less permissions to worry about there. What Linux lacks, is handling of reparse points, so some things now cannot be touched from there. The other thing Linux doesn't like, is if the C: drive is "hibernated" at the time you try to access that partition. Ideally you want Fast Boot turned off, before using Linux on it. Fast Boot can be interpreted as Hibernation. mv wuaueng.dll wuaueng.dll.bak You can try using the Win10 installer DVD or a Win10 emergency boot CD, and using Command Prompt from there, to do the rename if you want. That's another path to doing it. Permissions still work in such an environment. It's quite possible you're administrator when doing it that way... I don't recommend *deleting* files. Rename them for this sort of work. If you delete that file, you're going to need to learn how to make hard links, or you'll need to use sfc /scannow to repair it. Turning off "Windows Update" service does not stop it. USOSVC will use a scheduled task to turn it back on. If the file is renamed, there is less chance of that happening. Microsoft some day *could* auto-repair the whole freaking OS, so it's not a given that we will have this option in the future. If they wanted to, they could harden the OS to the point that only disconnecting the network cable would work. You don't want to damage any more than that, as things like BITS could be used for updating Apps from the App Store, or supporting some Powershell calls. You only want to try for the actual Windows Update service, for least damage. I don't even know if .msu files (downloaded from catalog.update.microsoft.com() will work, once you stick a fork in that file. It's pretty hard to come up with a file level operation that is side-effect free. Paul Paul, Curious as to why you recommend renaming wuaueng.dll and not just go into services.msc and Disable WindowsUpdate service. This works for Win10 Home and Win10 Pro versions. We had a real sh*t storm over the weekend at a clients location and 13 out of 20 systems got borked because of the recent updates. Those that weren't were ones I already gotten to and Paused/Delayed updates until mid Feb (Win10 Pro systems). I was able to recover each of the affected systems with a quick restore point recovery and then I've *temporarily* disabled windows update service. I've rebooted the systems to see if Win10 would somehow magically turn the service back on and so far it hasn't. Tried updating and I get a spinning arrow, then it times out saying there was an error, try later. So the disabling appears to be working fine. Note that Windows Defender will still get definition updates even though WindowsUpdate service is disabled. There is some disagreement on that point and even MS says ii gets updates via the update service. But.... I disabled windows update service two days ago and just verified the definition updates on several systems are current as of Jan 30 and Windows Defender shows it happy with everything being up to date. Bob S. How do we know what capabilities the USOSVC has ? It's possible for a scheduled task to go around switching stuff on if it wants, on the next reboot. As I indicated, even my method isn't foolproof, when the day comes that Microsoft makes a "self-repairing OS". And they could do that quite easily. They have all the tools to put-back things that users remove or rename. One thing Windows is missing, is an "immutable" bit, which is used on other OSes for laying a trap for OS stuff. For example, storing a file where a folder of the same name normally goes, then setting the immutable bit on it. That has been used to foil the installation of unwanted things. Renaming files takes away the starting material. Like removing kindling from a fireplace, leaving firebugs with only clinkers to use to start a fire. But the trick with removing starting materials, is to not remove anything which is shared by more than one process. Which is why I didn't give instructions to bludgeon qmgr (BITS etc). As there may be more than one thing you value, which relies on BITS for downloads. Paul Paul, This link may help: http://servicedefaults.com/10/usosvc/ Yes, it says it can can but doesn't appear to be the case on the systems I've disabled the update service. Also, look under Computer Management Task Scheduler Library Microsoft Windows UpdateOrchestrator This is the task that starts the Windows Update scan. After doing some trial and error testing in the past, it looks as though this is what allows Windows Defender definitions to be updated even though the WindowsUpdateService is disabled. Look under Computer Management Task Scheduler Library Microsoft Windows Windows Update and look at the sih (server-initiated healing) task. The following is the description copied from that window: "This daily task launches the SIH client (server-initiated healing) to detect and fix system components that are vital to automatic updating of Windows and Microsoft software installed on the machine. This task can go online, evaluate applicability of healing actions, download necessary payloads to execute the actions, and execute healing actions." So if the WindowsUpdateService is Disabled, the "sih" task doesn't run. I'm reading "healing actions" as being patches and updates and to restart services required if needed as long as they are not disabled - and that is what I'm seeing. If the update service is Stopped and you reboot, the service will be restarted. Update service can be set to Manual (default for Win10) or Auto or AutoDelayed and the update service will be running when you next boot the system. Not when it's set to disabled though. So far on all the systems I have disabled the "WindowsUpdateService" on both Win10 Pro and Home systems, I have not had an OS update and that’s after rebooting over several days and rechecking, the service remained disabled. Trying to trace thru what depends on what is difficult and can be confusing as to what actually happens when Win10 encounters an error - such as when a file is missing and stops a process from running. Looking in the various logs in the Event Viewer offers some insight. For instance, no errors are logged with the update service disabled and I manually trigger Win10 to do an update status. But... I haven't tested what the results would be by renaming the (mutable...;-) wuaueng.dll and then looking thru the Event logs. Not saying doing that is bad method to stop updates, just what else does it affect or not allow to happen? I haven't tested it whereas I feel confident from my somewhat limited testing that disabling the update service provides the desired outcome but still allows for definition updates. For my situation where the delay and pause feature in the Win10 update is not always available (depends on version and build), this was the cleanest method I've found. Your point on having an immutable bit is a good one but if malware can change the attributes of even hidden, system files - would having that "bit" really do any good? My Linux knowledge is minimal but I'm comparing the immutable bit attribute in Linux with taking ownership of a file or folder in windows. They seem to be the same thing. Bob S. |
#12
|
|||
|
|||
Windows Update in Windows 10: how to disable?
On 2018-01-29 20:40, Evgenii Sputnik wrote:
Hello. How do you *completely* disable Windows Update in Windows 10? I have only 32 GB SSD, so my options are limited. Evgenii It's very simple, whether you are a Home or Pro user. Download a program called 'Windows Update MiniTool' On the left hand side of the program under 'Search for Updates', "Update Service', set it to "Notification mode' Then, when there are updates to install, a notification pop-up from Windows will inform you. Run WUMT (NOT Windows Update from within 'Settings'!) it will show you what updates are available - you then have the option to either install the update OR hide the update. If you hide the update, they may again show up down the road to install. Again, you can just place a checkmark beside the updates you wish to install or hide. If you want to completely disable WU, run a program called 'Windows Update Blocker' It will allow you to disable WU completely without having to go into 'Services' to do so. If, down the road, you wish to check for updates, simply open WUB & reenable WU. HTH! |
Thread Tools | |
Display Modes | Rate This Thread |
|
|