Idea on stopping Windows 10 auto update (using WSUS)

just set the windows update service to disabled and never get updated automatically again... so simple

 

....Just use WUMT,and forget...^^

 

Right on the money with that one.

 

The actual problem is that we can't select the updates we would like to apply.

 

You can with Mini Tools in my sig, hide what you don't want (stays hidden), install what you wish, very simple to use.

 

I have been doing this for years.
Currently running server 2012r2 as WSUS server as a VM guest on my win10 pc (win10 comes with hyper-v).
Advantages:
- select with updates you want
- updates don't get install before you approve them (so you wait as long as you want)
- I have several pc's at home. Need to download only once from MS.
(Saves a lot of time when reinstalling because no need to download them again)

In WSUS you can select for which products you want to see updates (meaning: windows 10, office, skype, ....)

Note: this setup doesn't work if you are running win10 home because of missing GPO. It only works on win10 pro or enterprise.

__
Edit: As an additional bonus, I have every MS exe blocked in my (3rd party) firewall so don't have to worry about telemetry but stil receive updates.

 

You need to login to view this posts content.

 

Maybe this package is missing or differ
Microsoft-OneCore-UpdatePolicy-WOW64-Package~31bf3856ad364e35~amd64~~10.0.14393.0.mum
from Windows 10

if its missing from C:\Windows\servicing\Packages folder
i believe its will make updates system works as Server

 

I am not an expert on these matters, and I am not trying to stir this matter. What I would like to know is, are there any cases where individuals have been prosecuted or punished based on the evidence that Microsoft collects?

What are the risks when Microsoft installs all this updates? I think it is widely accepted that all phone calls are already recorded and analysed. Surely the information gleaned from updates is trivial? If there are any data files containing private information, surely they can be encrypted or kept on a removable drive. Are you saying that all encryption does not have any security value? The only information I want to protect is my bank details and/or passwords.

 

In that case step out of the digital life there is no garantee that your bank details are safe If they want they will lay hands on it just saying

 

You are quite right, but in the UK it is very difficult to step out of the digital life. Most bank branches are gone, or will be gone in a few years, replaced by automated systems. You cannot turn up at a call centre to sort out any problems. The point I am making, is the Information gleaned by Microsoft any more dangerous than all the other digital organisations?

 

In my Opininion MS is on gathering information on systems just as dangerous as other organisations. My point is if they want your credentials they will get it no mather what you do ! The only thing you can do is encrypth on high levels so it's much harder for them

 

WinAero Tweaker has a suggestion about disabling automatic reboot. I have applied the same thing for checking updates and it seems to be working.

Automatic check for updates is caused by the task, which recreates itself, even when it is deleted. I could use some feedback, if it is working?!

Disable Automatic Checking for updates, prevents autodownloading of updates, unless checked manually
ren "%WINDIR%\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Scheduled Start" "Scheduled Start.bak"
md "%WINDIR%\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Scheduled Start"
ren "%WINDIR%\System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start" "Scheduled Start.bak"
md "%WINDIR%\System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start"

Disable Reboot after Windows Updates are installed
ren "%WINDIR%\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot" "Reboot.bak"
md "%WINDIR%\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot"

 

that's cool.
Have you tested it?