How To Modify Scorched Policy When It Comes To Win 10 Updates  

I take a heavy handed approach when it comes to updates and use Windows Update Blocker and so far it does the job. It blocks everything including security updates and anniversary updates and cumulative updates. New inexpensive consumer backup notebook will be arriving shortly. And this is what I would like to do. Help as well as alternative suggestions welcome. I should point out I have taken a quick glance over at Windows Update MiniTool (WUMT) and I find the procedure cumbersome though that is probably my fault since I have not put the work in learning how to use it and not to mention there are umpteenth posts and pages about it.

I am going to be installing 1709 offline so as not to have win update kick in and wreck who knows what havoc. What I would like to do before hand is go to the catalog here

https://www.catalog.update.microsoft...ch.aspx?q=1709


for 1709 and manually download security updates and possibly even cumulative updates but I dunnno.

I believe I know that I have to first install Service Stack Update if I want to install security updates to an older OS such as 1709. Not exactly sure where I can get that.

Also in the list of security updates and cum updates here:

https://www.catalog.update.microsoft...ch.aspx?q=1709

I really do not know which one I should download offline to install right after the install of 1709. I am sure some or one of those recent security updates or cumulative updates is going to have a KB included that is going to download 1803 or even 1809 for me and I definitely do not want that.

So this is what I would like to do and if it possible I would appreciate some help in achieving this.

1. I will install on a blank drive 1709.
2. The next goal would be to download offline to a USB stick the latest security updates to 1709 and I do not suppose there is a way to download the latest security update so that it will not then try and update me past 1709.
3. Should I also download a cum update offline? and of so which one?
4. Afterwards and hopefully I have installed the latest security updates I am going to get Windows Update Blocker and go back to the heavy handed scorched Earth policy of disabling all updates.
5. I am aware of the usual precautions of what I can do with win10 pro as far as forestalling updates

If this method is making any sense to anyone I would appreciate some input.

Thanks so much.

dalchina said:

You have Pro, so why not simply install 1709 offline, set updates to Notify, Defer feature updates (upgrades) for 365 days.

Thus you are notified of whatever update is available using a normal Windows update scan. No brainer, really. Once you have updated, use a Faraday cage or whatever you fancy...

I use 1709 as you can see, set up as above. Somewhat to my surprise I've not been offered 1803 or 1809 although I suspect it's past the 365 days.

Thanks for the reply. I must be confusing you with someone else since I thought you also used Windows Update MiniTool (WUMT). I get confused a lot lately.

I have seen mention of your method before and I guess I am just fearful that MS will override those settings and just setting "set updates to Notify" is not enough. You must be THAT good that you have avoided any MS catastrophes.

>Defer feature updates (upgrades) for 365 days.

Done for sometime now and MS still upgraded me to 1709 from 1703 b4 the 365 days expired. They later apologized : )

>Once you have updated, use a Faraday cage or whatever you fancy...

Now you are just mocking me but I suppose I deserve it.

>Somewhat to my surprise...

That's my point. I do not want to be surprised.

phaedruspress said:

I am just fearful that MS will override those settings and just setting "set updates to Notify" is not enough.

They have already overridden metered connection, so your fear is not for nothing.

phaedruspress said:

Now you are just mocking me but I suppose I deserve it.

No, you don't deserve it.

dalchina said:

I meant it as just a way of saying "take whatever defensive measures you prefer". Sorry if it seemed inappropriate.

And yes, I have used WUMT - more out of curiosity. Actually I may still be within the 365 days as I upgraded to 1709 a bit late... just that I'm wary of what comes next.

>Sorry if it seemed inappropriate.

Not at all and really no offense taken I was just "pinging you" : ) and besides you have offered me so much good advise previously that you are entitled!