Sledgehammer - Windows 10 Update Control

Discussion in 'MDL Projects and Applications' started by pf100, Nov 28, 2016.

  1. NST_Adventure

    NST_Adventure MDL Member

    Jun 1, 2019
    137
    11
    10
    Atleas your script will make my pc windows update disabled forever :v
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. rayleigh_otter

    rayleigh_otter MDL Addicted

    Aug 8, 2018
    960
    739
    30
    @pf100 has worked very hard in the past year or so keeeping up with ms's f--kery, hats off to the man :worthy:
     
  3. NST_Adventure

    NST_Adventure MDL Member

    Jun 1, 2019
    137
    11
    10

    Yow you right buddy :worthy: just keep up about this script anyway :cheers: :clap::clap3:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Mavericks Choice

    Mavericks Choice MDL Expert

    Aug 5, 2015
    1,044
    3,578
    60
    My old win 7 machine died recently & now forced onto to win 10, your script works perfectly for mine on this OS, thank you. :cool:
     
  5. rayleigh_otter

    rayleigh_otter MDL Addicted

    Aug 8, 2018
    960
    739
    30
    #1365 rayleigh_otter, Oct 4, 2019
    Last edited: Oct 5, 2019
    get an intel 8th or 9th gen cpu, H310C (R2.0) board, add intel usb drivvers to boot and install wims and robert is your mothers brother. :)
     
  6. ajnauron

    ajnauron MDL Novice

    Nov 5, 2008
    11
    3
    0
    #1366 ajnauron, Oct 6, 2019
    Last edited: Oct 6, 2019
    I'm not sure this version works anymore. If I run Sledgehammer and then go "net start wuauserv", it fails, and "sc query wuauserv" explains the service is disabled, both of which are expected, but I checked the list of updates and a bunch of them got installed yesterday. Not sure how this is happening.

    Microsoft-OneCore-ApplicationModel-Sync-Desktop-FOD-Package~31bf3856ad364e35~amd64~~10.0.18362.295 | Superseded | OnDemand Pack | 10/4/2019 5:55 AM
    Microsoft-OneCore-ApplicationModel-Sync-Desktop-FOD-Package~31bf3856ad364e35~amd64~~10.0.18362.329 | Installed | OnDemand Pack | 10/4/2019 6:41 AM
    Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~10.0.18362.295 | Superseded | Language Pack | 10/4/2019 5:55 AM
    Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~10.0.18362.356 | Installed | Language Pack | 10/4/2019 6:41 AM
    Microsoft-Windows-FodMetadata-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | Feature Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | Foundation | 3/19/2019 4:56 AM
    Microsoft-Windows-Hello-Face-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:18 AM
    Microsoft-Windows-InternetExplorer-Optional-Package~31bf3856ad364e35~amd64~~11.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-LanguageFeatures-Basic-en-us-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-LanguageFeatures-Handwriting-en-us-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-LanguageFeatures-OCR-en-us-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-LanguageFeatures-Speech-en-us-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-LanguageFeatures-TextToSpeech-en-us-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-MediaPlayer-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-NetFx3-OnDemand-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 8/4/2019 3:28 AM
    Microsoft-Windows-QuickAssist-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Microsoft-Windows-TabletPCMath-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:18 AM
    Microsoft-Windows-Xps-Xps-Viewer-Opt-Package~31bf3856ad364e35~amd64~~10.0.18362.145 | Superseded | OnDemand Pack | 10/4/2019 5:55 AM
    Microsoft-Windows-Xps-Xps-Viewer-Opt-Package~31bf3856ad364e35~amd64~~10.0.18362.356 | Installed | OnDemand Pack | 10/4/2019 6:41 AM
    OpenSSH-Client-Package~31bf3856ad364e35~amd64~~10.0.18362.1 | Installed | OnDemand Pack | 3/19/2019 6:19 AM
    Package_for_DotNetRollup~31bf3856ad364e35~amd64~~10.0.1.2819 | Superseded | Update | 10/4/2019 5:59 AM
    Package_for_DotNetRollup~31bf3856ad364e35~amd64~~10.0.1.3003 | Installed | Update | 10/4/2019 6:41 AM

    Package_for_KB4508433~31bf3856ad364e35~amd64~~18362.263.1.1 | Installed | Security Update | 8/14/2019 3:31 PM
    Package_for_KB4509096~31bf3856ad364e35~amd64~~18362.235.1.0 | Installed | Security Update | 8/4/2019 2:10 AM
    Package_for_KB4515383~31bf3856ad364e35~amd64~~18362.350.1.0 | Installed | Security Update | 9/11/2019 8:26 AM
    Package_for_RollupFix~31bf3856ad364e35~amd64~~18362.295.1.5 | Superseded | Update | 10/4/2019 5:55 AM
    Package_for_RollupFix~31bf3856ad364e35~amd64~~18362.356.1.9 | Installed | Update | 10/4/2019 6:41 AM
     
  7. pf100

    pf100 MDL Expert

    Oct 22, 2010
    1,684
    2,440
    60
    @ajnauron What version of Windows 10 are you running? I have a test machine on 1903 pro that I haven't updated since July. All other version works the same the way I'm blocking updates so I don't know.

    You already said wuauserv is disabled, so check task scheduler "\microsoft\windows\updateorchestrator" and all tasks under "last run result" should say either "task has not yet run" or "access denied."

    None of those updates you listed should have installed on their own and I have no other reports of anything like this happening.

    Open admin powershell window. Enter "Get-WindowsUpdateLog". This will create a WindowsUpdate.log file on your desktop. Make a link to where I can download it or post it on pastebin and I'll take a look.
     
  8. pf100

    pf100 MDL Expert

    Oct 22, 2010
    1,684
    2,440
    60
    @ajnauron I looked through the update log for the updates you put in bold and there's no record of them being installed through windows updates.
    Did you install any software on the morning of October 4, like Office or any manufacturer software (dell, hp, lenovo)?
    I could be wrong, but it looks like those updates were installed through the installation of other software that was installed either manually, or downloaded and installed by a program that updates itself.
     
  9. ajnauron

    ajnauron MDL Novice

    Nov 5, 2008
    11
    3
    0
    No manual installs/SW install GPOs/automated SW installs (non-domain joined). If this interests you I could provide any additional logs as requested, but otherwise I'll just keep an eye on them, not clear what's happening.
     
  10. pf100

    pf100 MDL Expert

    Oct 22, 2010
    1,684
    2,440
    60
    I wish I could be physically present or connect to your computer to find evidence of what might have happened. I'm not a pro at forensically tracing logs of update installs because I've never had an unexpected update and needed to trace that process specifically in my research.
    Can you send me your "Windows\SoftwareDistribution\ReportingEvents.log" file?
     
  11. app_raiser

    app_raiser MDL Junior Member

    Mar 18, 2018
    89
    37
    0
    seemingly ms pushes dotnet updates to the machines.

    i suspect my dear1 machine at work as targeted by ms extended patience (the lovely immersive start menu is broken now - thank god for open shellol). i do not know but im absolutely sure it's caused by windows (dotnet) update.

    however -> sledgehammer protected me from installing useless spy-updates for several months now. thank you once more for your work on the project! i do know how much time scripting consumes :)
     
  12. pf100

    pf100 MDL Expert

    Oct 22, 2010
    1,684
    2,440
    60
    If this is happening because an external program is downloading or updating DotNet or whatever like how some programs will download or update Visual C++ or DirectX runtimes then I want to let that happen. But if it's coming through any of Windows 10's forced update mechanisms then I want to force control of all of that. None of the previously mentioned updates appear to be coming through Windows Update as best as I can tell. No updates should ever be getting through in Home versions without allowing it like in the problem above or any other version. I'll keep a close eye on this because my mission in life is to control Windows 10's forced updates.
     
  13. Carlos Detweiller

    Carlos Detweiller MDL Spinning Tortoise

    Dec 21, 2012
    3,231
    2,849
    120
    This might have been a case of Store-updating/downloading a Centennial App. I suspect the downloaded Dotnet updates are dependencies/requirements of the Centennial-packed Store app (like, e. g. Paint). You can check the history of Store App updates in the Store account info.

    Sledgehammer doesn't block the Store update, or does it?
     
  14. pf100

    pf100 MDL Expert

    Oct 22, 2010
    1,684
    2,440
    60
    Sledgehammer doesn't block any Store and app updates on purpose, but it can block some operations of the Store just because wuauserv is disabled.
    I'm not sure where the line is drawn on what the Store can and can't update while Sledgehammer is in place because Microsoft keeps changing things.
    The Store used to require wuauserv to run, but at some point you can now open the Store with wuauserv disabled, you just can't install an app.
    All I know is that the Store itself has full functionality when you allow it in the script's Configurator screen.
    The script has never blocked anything to do with any app once it's installed, or if it does I've never heard of it happening.
    I've never studied exactly how the Store works so I'll ask around about this. Thanks for the info.
     
  15. Carlos Detweiller

    Carlos Detweiller MDL Spinning Tortoise

    Dec 21, 2012
    3,231
    2,849
    120
    #1379 Carlos Detweiller, Oct 9, 2019
    Last edited: Oct 10, 2019
    It's, of course, only speculation. However, if WU is blocked, Store is the only thing that could theoretically push things onto the system (apart from external apps that trigger).

    Apart from that, the log only shows the packages have been installed, but not where they came from. Even with wuauserv disabled, DISM can still install CAB packages. That's what WSUS Offline Update does, for example (clarification: it shuts down wuauserv, but not disables it. The service is not started through update installing).
     
  16. trashman01X

    trashman01X MDL Novice

    Oct 10, 2019
    6
    1
    0

    pf100 first of all I want to say thank you for making this wonderful script.
    I really like how it works and it fits my need perfectly for someone who is a professional gamer.

    I wanted to be able to run my games without any sort of windows updates ever happening to me at inconvenient times.

    I also like how I can play windows store games by using the E option (In the configurator of your script)

    My question for you, is there any-way to run just the CONFIGURATOR just by its self.
    I am switching the service on an off quite a lot so that I can use the store temporarily, and as you might know there is a lot of stuff the script does before hand every single time.

    Should I be just using WUB to do this easier or should I run your configurator inside the script every time?
    Which one would be faster.

    Or can you make a new script which just is the configurator?

    Thank you very much :)