Main Area and Open Discussion > General Software Discussion

How to REALLY stop ******* Windows Update on Win10?

<< < (3/5) > >>

Shades:
Hello again, i did not found eMail, but a link with similar content to block Microsoft Servers.
Stop Windows 10 spying on you using just Windows Firewall

Hope it helps, take care!

edit
Attention!
Above is not mentioned to be (mis-)used by beginners since it go systemdeep without restore!! You must know what you do!
-KodeZwerg (July 26, 2018, 01:40 AM)
--- End quote ---

Firewall rules? Those are not "systemdeep" and they can be disabled or removed with a few mouse clicks when you use the standard Windows Firewall interface. There are 3rd party tools that make working with the Windows Firewall even simpler.

Generally speaking, do understand that blocking rules in a firewall can have consequences for some functionality in the operating system. The article in the link above discusses a list of IP addresses and domain names that Microsoft uses for all their telemetry and provides a batch script to create and apply Windows firewall block rules. Not more, not less.

However, Microsoft cycle through their (pretty extensive) list of IP addresses and domains, so this list needs very frequent updates. Because an IP address may block a telemetry server today, but could be blocking access to Cortana or Bing or Windows Update or Skype tomorrow.

That last part causes confusion with lots of users, especially those who are not too familiar with networking/use of firewalls. As it is, these firewall block rules are not that effective as a solution, because of the IP address cycling, but also because because services with a domain name the starts with 'telemetry' can just as well handle (some) traffic from Skype or any other cloud service provided by Microsoft for that matter.

If you are not entrenched in those services and have a local user account on your Windows 10 installation, you can more or less safely use the provided Firewall block rule list, disable those rules once a month for doing Windows updates and when your system is up to date, enable the block rules again.

It would even be better if you have a hardware based dedicated firewall device where you apply these block rules. Than you can be sure those rules are not circumvented by anything Microsoft alters on your Windows system. A simple spare/old PC with at least 2 network cards, in combination with software like 'OPNSense' or 'pfSense' can already be used as a hardware based dedicated firewall device. Both software packages provide much, much more services than just a firewall, but you don't have to use these. Best of all, 'OPNSense' and 'pfSense' are open source and can be used free of charge, have active forums that provide a lot of help and if you require it, offer their support for a fee. 'pfSense' even sells hardware boxes with their software pre-installed and configured.

KodeZwerg:
I wanted to give a warning out before bad things happen to unexperienced Windows Users. In past that point i missed to write, so take care what you do.
Unexperienced run blind the batch and wonder why certain Windows-Things may suck afterwards.

For me it was always enough to configure No-Auto-Update with metered Network setting.

wraith808:
As if by magic:

https://www.ghacks.net/2018/07/26/microsoft-promises-no-more-unexpected-update-reboots/

However, I'd still rather have control rather than a DS Model predicting my behavior...

f0dder:
Right,

Disabling updates is not an option. Making updates non-automatic might work, but is a poor option.
I don't want to have to remember to go and check for + install updates - I want it to be a fairly automatic process.

wraith808: that link is just Microsoft really, really, REALLY not getting what people are complaining about >_<

rgdot:
Realized Win10 (Pro only?) has a setting to defer updates for 35 days. MS really have no clue, what's the point of 35 days specifically...

Navigation

[0] Message Index

[#] Next page

[*] Previous page