Several months ago wrote prophetic piece Windows 10 updates - One step forward one step back lamented massive over-complication update facility latest version OS amount time needed get things done as well as some planned improvements designed address these issues then also matter of quality
Highlighted in recent Creators reviews first time ever big errors 1804 build something never happened before Windows Updates used to be legendary rock-solid then Build 1809 introduced still more issues not for me everyone Microsoft actually paused update restored then axed completely then revamped update functionality
So what's happening?
Well Microsoft changed how Windows 10 handles updates first separation between regular monthly patches and feature upgrades (twice-yearly upgrades a-la old service packs) second Windows Home users option defer updates up to 35 days won't instantly pressured installing packages possibly hitting bugs way it's been happening more lately still other changes all meant reign in chaos
In a nutshell more like ... the old updates.
Need fair give praise when praise due how many (big) companies capable admitting mistakes backtracking decisions? not done industry usually end up long almost religious spiels buzzwords justifying one bad decision after another but Microsoft did change react quite few times past several years was Start Screen fiasco now updates becoming more reasonable
VERY good thing will write complete article when test properly come 19H1 update general expectations fairly simple speed stability Windows 7 8.1 allow complete updates within about 20 minutes one reboot done used to be slowness problem long time that got resolved Windows 10 like see same kind of speed because waiting hour or two system upgrade simply too much time people need productivity not something easily afford lose
Active hours & automatic updates another big issue personal example Windows machines stay up without reboots many weeks overnight run all sorts scheduled tasks including backups work setup remains having system trigger reboot highly disruptive transactional nature automatic updates works fine phones where people little no 'history' immediate work but isn't feasible desktop
Then reliability element while NEVER update machine without performing full system image first even notion having restore OS state because bad patch annoying another waste time wasn't problem ever only now overall quality patches going down problems propagating older versions Windows know related anti-virus software while don't need one most people do use one who knows other complications may arise whole drama speculative execution issues Meltdown Spectre doesn't help because things took another turn downhill January last year also back then similar issues patching anti-virus compatibility only problem now isolated non-Windows 10 systems
So not big ask: reliability
Sounds familiar? Yes. Much like the old updates!
And so years years work making development seem faster but end just doesn't work reason why old tested methods way they are reason why cannot arbitrarily change systems due random fashion fads whatever technology jargon week may be Microsoft's decision slow down right step right direction well done
That said now diverge show amount hassle Windows Home user savvy determined user needs go prevent system automatically updating itself with all associated perils process
Medic to your medic
When Windows 10 first came out Windows Home user wanted prevent box updating automatically whenever patch two options mark network connection metered or stop Windows Update service
At some point Microsoft disabled access Windows Update service made it run higher privileges than admin needed tool like ExecTI run services.msc as TrustedInstaller able stop disable service come one Creators updates new service Windows Update Medic designed start service whenever detected down this one also needed extra privileges
Going through system discovered still more tools additional services scheduled tasks all designed keep update service running at all costs now understand imperative unpatched machines risky but now situation half dozen processes only purpose keep update service alive and they work against user ordinary people don't have skills manipulate services but if someone stopped one there's reason for that system should not pretend know better
May say but Dedo malware can do this yes malware also prevents you stopping it symptoms similar create dangerous precedent 1) users become insensitive anomalies ignore real problems when do occur 2) users developer distrust toward operating system thus end up not doing any patching whatsoever
By adopting self-healing mechanism works against user Windows Update accidentally co-equates itself with kind software you don't want on systems if hit software forums discussing Windows updates notice prevalent tone techies simply end up refusing do any updates Windows 10 whatsoever fear box changed or not able control operating system and this worse than original state Microsoft tried fix
Now may ask well how distinguish between tech savvy person making Windows Update change themselves versus bad software altering system state? well first thing one should discuss not what happens AFTER contract malware it's what happens BEFORE you do that because once on system not having updates least of your problems many practical ways make system secure like using EMET Exploit Mitigation running standard (limited) account inbound firewall very useful home systems totally applicable unlike industry where botnet attacks most likely happen plus most home users some sort router often features firewall own
Second if really want do this two ways one old method allowed Windows 7/8.1 users make whatever choice like (still available Pro users) or perhaps CAPTCHA mechanism on service state change ask user authenticate provide some sort code know it's deliberate change techie doing then no reason "heal" their service
Going back topic services scheduled tasks this what came up first services have Windows Update and Medic service but also one called Update Orchestrator Service downloads updates manages them checks integrity sounds important yet
Don't recall service being there earlier builds Windows (might be mistaken) but more importantly even with service disabled state only Windows Update service manually turned on ran full sequence updates machine able download install configure monthly patches without any problems actually bothered by inconsistency between written text net and actual results
However service may still turned on where scheduled tasks come in so Task Scheduler (taskchd.msc) again need admin privileges make changes left pane navigate section called WindowsUpdate (under Microsoft > Windows) here find several tasks some disabled by default but two ready state would start WU service under some conditions looked Windows 7 box comparison these tasks don't exist there
Then section covers Update Orchestrator few disabled but others would run checks whatnot would be perfectly fine if not forced nature updates could potentially bring bugs (need system image first) disrupt work (reboot happens middle nightly backup kills work session) so more to disable
And so in order not have system restart random times possibly end up unbootable which can happen and has happened instead using official toggle sanctioned by Microsoft way it was before Windows 10 tech-savvy users now need dabble half dozen services scheduled tasks achieve same result
This actually makes system less stable less secure less everything! but between potentially losing important data due to reboot and tweaking system think choice obvious Microsoft does seem realize understand this hence change first step toward winning trust users back took while but happened that's important thing story
Black Viper & deeper look at the services
At some point even decided consult Black Viper's guide Windows 10 dude became famous XP era wrote guide which services could safely disable improve performance minimize system footprint memory security wise looked went through services see what other entries showing there no applicability my setup namely local account no use online store or purpose touch-optimized universal apps (UWP) whatnot remember saying happy Lumia 950 user in mobile space Windows Phone most elegant OS ever designed best ergonomics layout whole paradigm makes total sense tragedy Windows Phone EOL-ed end year but desktop no value touch apps inferior desktop counterparts every way
Among first entries AppXSVC service deploys Store applications using local account can't really install Store apps anyway so what's purpose this local setup for instance even with service stopped Metro apps launch run just fine really
Found another Capability Access Manager Service need this actually able read set access permissions UWP apps like Mail Calendar etc affects what see Settings menu with service turned off toggles won't display but then if one has everything tweaked Off anyway not using any these apps does service need running why can't set Manual?
Another Store-related service ClipSVC for apps bought Store no problem but back issue local versus online (Microsoft) account if don't have one can't shop fine too but service not required unless one has online account has associated Store or purchased apps through Store not opposed at all just seeing no purpose having service up running if user cannot take advantage functionality
Would actually love able use store Microsoft a-la Synaptic Software Center KDE Discover as in Linux but just doesn't really exist mobile-thingie apps Windows Store aren't classic desktop apps you want just can't have full desktop programs if existed would be really neat alas
Anyway came across something called Geolocation why useful desktop? know Gnome offers something similar there question also remains useful if on go travel abroad might want localized results but most cases just doesn't really make sense
Then finally stumbled upon oldie but goldie SSDP Discovery unplug 'n' play dynamically opens ports you can game such without manually tweak applications didn't make sense XP still doesn't Windows 10 won't work if router has UPnP disabled which you should if actually trying do something practical security point of view for change
Sync Host syncing mail contacts other user data sync where how? if not using online account won't work so no purpose this service also discovered couldn't really stop it another interesting facet so much potential so much goodness made sense Phone but doesn't fly desktop
Tons more other services all geared toward model simply isn't applicable typical desktop user thing is ... Windows XP had hardware profiles where could actually boot machine different configurations so could have gaming profile sharing profile security profile etc could have been used provide practical configurations rather than generic permissive setup doesn't really give advantage example local account doesn't need any online-aware services too much stuff running could actually harm performance so not having extras win-win situations both functionality philosophy perspective
But you hate tweaking!
Yes I do if read articles going back 2006 see opposed to tweaks few systems changes believe should ever made yet found myself taming Windows 10 extensively very thing promised myself not to do yet had to do it ensure right level control manage system if when deploy production environment will come day probably end up using Windows 10 (Pro) need make sure can maintain sane stable robust quiet effective setup
What Microsoft aims do upcoming release first important step restoring some awesome quality used to have in systems kudos let's hope beginning positive change back to slow-and-unbreakable philosophy
สรุป
May feel article all over place but it's not culmination about four years process ended up rather superfluous automatic forced updates did not yield better quality stability security Microsoft Windows users something vendor acknowledged gradually rolling clock back from agile to awesome in regard almost no documented cases giant corporations admitted mistakes managed steer themselves different track so hugely important no matter what think feel about Microsoft
That said still lot more done regain legendary quality yore also restore user trust updates first step journey for me end will have achieved when realize need not make any changes system defaults ever again and if Microsoft plays card right can win big here because mobile systems all about being closed locked little no user control so Microsoft has opportunity do opposite we're not there yet hope strong perils high but for now far as Windows Updates concerned step right direction one small step for man one giant leap for whatever
Cheers.
