Sledgehammer - Windows 10 Update Control

Discussion in 'MDL Projects and Applications' started by pf100, Nov 28, 2016.

    Hi @pf100 after setting Configurator script to (N), do you think ms still can force some automatic updates?
     
  1. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,067
    3,455
    90
    Good question. Probably yes.
    But who knows? Hopefully I'll hear some feedback on the configurator soon.
     
  2. lomticksoftoast

    lomticksoftoast MDL Member

    Nov 12, 2009
    197
    149
    10
    Now only four lines of 'explanation' #238
     
  3. username122

    username122 MDL Novice

    Aug 29, 2016
    6
    6
    0
    Especially for those who are preparing for the transition to Spring Creators Update.
    Microsoft has added a new service - WaaSMedicSvc (Windows Update Medic Service).

    As the name implies, this "medic" is intended to "treat" the intervention in the process of obtaining updates. For example, look at the contents of the "Schedule Scan" parameter at:
    HKLM\SYSTEM\WaaS\WaaSMedic\TaskStore
    Maybe there is something else.
    While it's not known what can be the best choice - removing or disabling this service...
     
  4. elzna

    elzna MDL Senior Member

    Aug 28, 2013
    434
    56
    10
    It's probably better if this service is enabled when WUMT runs and then disabled permently on script close/WUMT close. Just to be on the safe side.
     
  5. Skunk1966

    Skunk1966 MDL Member

    Jul 15, 2011
    165
    167
    10
    I just checked Windows 10 Pro 1709 in VM and I can't find the service anywhere. Also no such key in register
     
  6. shewolf

    shewolf MDL Senior Member

    Apr 16, 2015
    471
    1,071
    10
    #247 shewolf, Mar 12, 2018
    Last edited: Jan 29, 2019
    Access to this post is restricted!
    You're trying to open the post, written by @shewolf,
    but unfortunately it was marked as a draft (by the user himself or the UFO)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. kabutopepe

    kabutopepe MDL Novice

    Feb 18, 2018
    22
    6
    0
    And which update introduces this ? or it's only known for a later update ?
     
  8. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,067
    3,455
    90
  9. kabutopepe

    kabutopepe MDL Novice

    Feb 18, 2018
    22
    6
    0
    im on 1607 and both 23814 (Upgrade Assistant) and 23057 ( remsh) are the ones I have disabled tasks for and the work done by your script, no problems here.

    They keep re releasing them and I have to hide them again tho.
     
  10. username122

    username122 MDL Novice

    Aug 29, 2016
    6
    6
    0
    It can be made easier:
    :: Disable service
    reg add "HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc" /v "Start" /t REG_DWORD /d 4 /f
    :: Disable the possibility of uncontrolled service startup
    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WaaSMedic.exe" /v "Debugger" /t REG_SZ /d "%WINDIR%\System32\taskkill.exe" /f

    Regarding the "Schedule Scan" parameter (in "HKLM\SYSTEM\WaaS\WaaSMedic\TaskStore") - this dirty key is protected by permissions.

    If someone does not find this in 1709 version - I remind you that this is about version 1803 (build 17115.1).
     
  11. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,067
    3,455
    90
    You don't have to worry about protected registry keys if the program they're trying to run won't run (WaaSMedic.exe). I don't trust registry keys unless you can keep them the way you want them. So it's actually easier to remove permissions from WaaSMedic.exe.
     
  12. kabutopepe

    kabutopepe MDL Novice

    Feb 18, 2018
    22
    6
    0
    #253 kabutopepe, Mar 13, 2018
    Last edited: Mar 13, 2018
    Any of the new updates does something vs the script/wumt/wub ?

    ED: After checking askwoody for a while I applied all of them on 1607 , no problems here.
     
  13. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,067
    3,455
    90
  14. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,067
    3,455
    90
    I'll test that vs the current "remove all users" approach.
     
  15. yipika

    yipika MDL Novice

    Jul 16, 2016
    6
    1
    0
    Another reason IMO is it doesn't block the system from accessing the file. Just the execution.
     
  16. Skunk1966

    Skunk1966 MDL Member

    Jul 15, 2011
    165
    167
    10
    #260 Skunk1966, Mar 15, 2018
    Last edited: Mar 15, 2018
    Question: if I block SIHClient.exe outbound connections can I still download and install updates?
    The reason I'm asking is that in my VM I blocked SIHClient.exe outbound connections in my firewall. WUMT finds 2 updates but when I tell WUMT to download and install the 2 updates nothing happens

    EDIT: changing the firewall rule and allow connections makes no difference; still downloading updates doesn't work.
    Can someone tell me what services/.exe's I have to allow connecting to be able to download updates?
    Windows 10 version is 1709