Advanced Update setting won't stay disabled.

The option circled in RED will allow me to turn it off, but then it turns itself, right back on again.








Is there a registry setting that will keep this turned OFF. Windows 10 Home

Sledgehammer works for me, or actually Matthew Wai's solution with Sledgehammer script bits.

W10 Tweaker said:

Sledgehammer works for me, or actually Matthew Wai's solution with Sledgehammer script bits.

Well, I'm gonna TRY Windows Automatic Update Manager. It sounds like it MIGHT do what I want.
Enable or Disable Windows Update Automatic Updates in Windows 10

It still doesn't offer a solution to the problem in my OP, but it looks like it MAY, make that problem, a non issue.
We'll... see how it works.

Hi, there is detailed discussion about this setting turning back on again and some attempts to set it programatically in the comments following this tutorial. Also no satisfactory outcome discovering a related registry value.

Turn On or Off Windows Updates for Microsoft Products in Windows 10

dalchina said:

Hi, there is detailed discussion about this setting turning back on again and some attempts to set it programatically in the comments following this tutorial. Also no satisfactory outcome discovering a related registry value.

Turn On or Off Windows Updates for Microsoft Products in Windows 10

Try3 said:

Thanks for the pointer to the PS version. I have also just tested it [it needs elevated permission] and it works both ways - On & Off.

- - - - - - - - - - -

@Brink - perhaps you could add this as an option in the tutorial?
From How to Opt-In and Detect to Microsoft Update for other Microsoft products using Powershell – Jay Tuckey’s Blog

PSWU-MSUpdate-On.ps1 {Run as Admin}

Code:

$ServiceManager = New-Object -ComObject "Microsoft.Update.ServiceManager"
$ServiceManager.ClientApplicationID = "My App"
$NewService = $ServiceManager.AddService2("7971f918-a847-4430-9279-4a52d1efe18d",7,"")

PSWU-MSUpdate-Off.ps1 {Run as Admin}

Code:

$ServiceManager = New-Object -ComObject "Microsoft.Update.ServiceManager"
$ServiceManager.RemoveService("7971f918-a847-4430-9279-4a52d1efe18d")

Denis

Found this. Try to run it in Admin PS, and get this error...







Unfortunately, I don't know much about PowerShell. :/

Ghot,

This thread seems to be a split off from another. If you can give me a link to the parent thread then perhaps seeing it in context will remind me about it all. At the moment, I am clueless.

This is going to get embarassing. I think my quoted thread must be years old but it is going to turn out to be last week.

But without seeing the other info, it does occur to me that the code for turning off should not be run unless it was turned on in the first place. Was that the case with your failure?

Denis

Try3 said:

Ghot,

This thread seems to be a split off from another. If you can give me a link to the parent thread then perhaps seeing it in context will remind me about it all. At the moment, I am clueless.

This is going to get embarassing. I think my quoted thread must be years old but it is going to turn out to be last week.

But without seeing the other info, it does occur to me that the code for turning off should not be run unless it was turned on in the first place. Was that the case with your failure?

Denis

Same one @dalchina linked..

Turn On or Off Windows Updates for Microsoft Products in Windows 10

Ghot said:

Well, I'm gonna TRY Windows Automatic Update Manager. It sounds like it MIGHT do what I want.
Enable or Disable Windows Update Automatic Updates in Windows 10

It still doesn't offer a solution to the problem in my OP, but it looks like it MAY, make that problem, a non issue.
We'll... see how it works.

Good morning, just an FYI if you decide to use WAU Manager, I used it for a few months and never saw any updates for Windows Defender. This was my motivation to try wumt and finally Matthew's Wai's fix. I now see Windows Defender updates very regularly.

Michael

Ghot,

Sorry but that thread represents the whole of my knowledge of the subject.

In one of my posts at the time, I noted that the relevant Registry entry might merely be a marker of the WU setting rather than its controller. Just for completeness, this is the Registry key that I kept a record of at the time.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\7971F918-A847-4430-9279-4A52D1EFE18D

I also kept a shortcut to Kari's guidance Update and upgrade using PS - TenForumsTutorials

Denis

Try3 said:

Ghot,

Sorry but that thread represents the whole of my knowledge of the subject.

In one of my posts at the time, I noted that the relevant Registry entry might merely be a marker of the WU setting rather than its controller. Just for completeness, this is the Registry key that I kept a record of at the time.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\7971F918-A847-4430-9279-4A52D1EFE18D

I also kept a shortcut to Kari's guidance Update and upgrade using PS - TenForumsTutorials

Denis

It's cool. I think the Windows Automatic Update Manager, makes this whole post, a moot point. If IT works then the switch in the Advanced Settings, doesn't really matter anymore.

W10 Tweaker said:

Good morning, just an FYI if you decide to use WAU Manager, I used it for a few months and never saw any updates for Windows Defender. This was my motivation to try wumt and finally Matthew's Wai's fix. I now see Windows Defender updates very regularly.

Michael

I don't use Windows Defender at all. In fact, I disabled it entirely. There's nothing wrong with Windows Defender, but it was poking holes through my Bitdefender Internet Security's firewall. BDIS was designed to work WITH Windows Defender, which may have seemed like a good idea at the time.

After many years, they finally added a "block" everything option (unless allowed) rule in their firewall. Best of all it works.
So I can just set it to block all, then only allow the 2-3 things I want to have access, through that block.

BUT... Windows Defender, because it worked WITH Bitdefender, was allowed to bypass that block all rule. Which, pretty much defeated the purpose of the block all setting. So I disabled Windows Defender, and now all is well.




IMO, a firewall should block everything by default. Back in the Windows XP days, Zonealarm's free firewall was the best there ever was. It blocked everything by default, and any time a program wanted to access the internet, it popped up a warning and asked for MY permission to allow access for said program.

Since those halcyon days, every firewall I've tried, has at best, been a mere shadow of the awesomeness, that the original Zonealarm free firewall was. Programmers have spent years working on firewall rules, giving firewalls AI, etc., which is pretty dumb.
The firewall should answer to me and nothing else. I have this theory that programmers think they'll get fired if they don't keep changing (improving?) things.
They are probably right. But that's not MY fault, and I shouldn't have to pay for their job security.


End of rant.