Sledgehammer - Windows 10 Update Control

Discussion in 'MDL Projects and Applications' started by pf100, Nov 28, 2016.

  1. kabutopepe

    kabutopepe MDL Novice

    Feb 18, 2018
    22
    6
    0
    What is the problem ? I disabled all updateorchestrator and rempl tasks ( the first due the windows10upgrade assistant s**t and the second because it almost froze my computer when it ran) before starting to use the script , so maybe I dont have it .
     
  2. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
    The only problem is fixing the behavior of windows updates. And for the rest of your post, you hopefully won't have to worry about surprise updates for a long time. :)
     
  3. shewolf

    shewolf MDL Senior Member

    Apr 16, 2015
    471
    1,065
    10
    #163 shewolf, Mar 1, 2018
    Last edited: Jan 29, 2019
    Access to this post is restricted!
    You're trying to open the post, written by @shewolf,
    but unfortunately it was marked as a draft (by the user himself or the UFO)
    :eek:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
    Thanks for that. I don't think I've seen that before. The problem I'm having is people are telling me that updates are being installed with wuauserv disabled, using wub, through usoclient.exe and remsh.exe. Some people like the script and some say to disable usoclient.exe and remsh.exe and not to use wub.exe with the script so they can use the store. So I'm going to do both.
    Preventing wuauserv from running at all as I'm currently doing, and blocking it at the firewall as you showed me would appear to me to achieve the same result. Your method is much simpler, but what do you say about the reports of updates not using wuauserv? I've heard lots of reports of that and I don't see how I can stop that with just disabling/blocking wuauserv. Maybe you know something I don't.
     
  5. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
  6. kabutopepe

    kabutopepe MDL Novice

    Feb 18, 2018
    22
    6
    0
    #166 kabutopepe, Mar 1, 2018
    Last edited: Mar 1, 2018
    Guess if I have any problems ill update the scrip but what you described basically should be prevented by the workaround I applied pre script ( disabling all the tasks in remsh and updateorchestrator so basically they wont run automatically anyways) . Thanks for your work tho :)

    All of this is going to make me hide all kinds of updates before I confirm they dont bring any other extra updates downloader , as both 23814 and 23057 brought the upgradeassistant and the remsh which try to update your computer even if you have updates disabled
     
  7. shewolf

    shewolf MDL Senior Member

    Apr 16, 2015
    471
    1,065
    10
    #167 shewolf, Mar 1, 2018
    Last edited: Jan 29, 2019
    Access to this post is restricted!
    You're trying to open the post, written by @shewolf,
    but unfortunately it was marked as a draft (by the user himself or the UFO)
    :eek:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
    #168 pf100, Mar 1, 2018
    Last edited: Mar 2, 2018
    (OP)
    Edit: @shewolf
    service=wuauserv is not in the second post. Is this intentional and the second one is right?
    In this post you have
    netsh advfirewall firewall add rule name="Block Windows Update" dir=Out action=Block program="C:\Windows\System32\svchost.exe" service=wuauserv protocol=TCP remoteport=80,443
    In this post you have
    netsh advfirewall firewall add rule name="Block Windows Update" dir=Out action=Block program="C:\Windows\System32\svchost.exe" protocol=TCP remoteport=80,443

    It's a deal. :)

     
  9. kabutopepe

    kabutopepe MDL Novice

    Feb 18, 2018
    22
    6
    0
    decided to update to the newest scrip anyways , it opens wumt way faster and wumt also gets the updated faster , did you do any change ?
     
  10. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
    I did do a lot of changes but I have no idea why it takes less time to search for updates.
     
  11. Meesterlijk

    Meesterlijk MDL Novice

    Aug 19, 2011
    5
    7
    0
    #171 Meesterlijk, Mar 2, 2018
    Last edited: Mar 2, 2018
    Sorry to say but:
    copy %WINDIR%\System32\UsoClient.exe %WINDIR%\System32\UsoClient.exe-backup /Y > nul
    copy %WINDIR%\System32\UsoClient.exe %WINDIR%\System32\UsoClient.exe-backup2 /Y > nul

    Acces denied on fileUsoClient.exe

    Started as admin but not renaming the file to UsoClient.exe-backup and UsoClient.exe-backup2 ....

    Keep up the good work :)
     
  12. kabutopepe

    kabutopepe MDL Novice

    Feb 18, 2018
    22
    6
    0
    Hmm for me it works , it made the backups and removed permissions from the file
     
  13. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
    #173 pf100, Mar 2, 2018
    Last edited: Mar 2, 2018
    (OP)
    Edit: @Meesterlijk Run this command in an administrator prompt:
    Code:
    icacls %WINDIR%\System32\UsoClient.exe /reset
    Then run the script again and tell me if it fixes the usoclient.exe backups.

     
  14. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
    #174 pf100, Mar 2, 2018
    Last edited: Mar 2, 2018
    (OP)
    This post is what happens when you try to get all tricky and edit a post and get everything just right and then find out you replied instead of editing.
    This unintentional post left intentionally blank.
     
  15. rpo

    rpo MDL Expert

    Jan 3, 2010
    1,440
    1,420
    60
  16. Meesterlijk

    Meesterlijk MDL Novice

    Aug 19, 2011
    5
    7
    0
    After the /reset it works fine, thanks for the solution. :)
     
  17. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,447
    90
    Thanks for letting me know this can be a problem. I'll fix it in the next release.
     
  18. rpo

    rpo MDL Expert

    Jan 3, 2010
    1,440
    1,420
    60
    You are right!
     
  19. Jans

    Jans MDL Novice

    Oct 17, 2009
    20
    2
    0
    netsh advfirewall firewall add rule name="Block Windows Update" dir=Out action=Block program="C:\Windows\System32\svchost.exe" protocol=TCP remoteport=80,443
    netsh advfirewall firewall delete rule name="Block Windows Update"

    These firewall rules probably won't work when a third-party security suite like KIS is installed, which disables/bypass Windows firewall ?