How to guard your computer from installing unwanted updates.
For Windows 7 in English
Semi-manual updating
First:
1. Click the start menu and enter “Services” in the search field.
2. In the list of services that appears, go down to “Windows update”, right-click and go to “Properties”. If it is set otherwise, change to “Manual” and click “OK”. Then right-click again and click “Start”.
Then:
3. Control Panel > Windows Update > Change settings.
4. Choose “Check for updates but let me choose whether to download and install them”.
5. Go back to the previous panel (<) and choose “Check for updates”.
6. After the two lists of all available updates have appeared, go through the lists of “important” and “optional” updates. Unmark and right-click the ones you never want to install and choose “hide update”.
7. Mark only the updates you do want to download and install. Go back to the previous window and click “Install”. You can first click the update to see a description.
8. If you before had another setting under “Change settings”, go back and revert to it.
In case you otherwise never want to update this way, but only fully manually (see below), go back to 1. and 2., stop the “Windows Update” service and change Properties to “Disable”. Even if you do want to update this way again, it is a good idea to keep the service set at “Disable” in the meantime. It appears possible that this service can otherwise be started from an external source. It is for the same reason also advisable to keep the update setting at “Never check for updates (not recommended)”.
Fully manual updating
Download all actual updates as follows:
● http://www.microsoft.com/en-us/search/DownloadResults.aspx?q=%22windows%207%22%20updates&sortby=-availabledate, then chose “Newest to oldest” in “Sort by” if not already so.
and/or here:
● https://technet.microsoft.com/library/security/ms15-aug – for August 2005.Correspondingly for other months: ms15-sep for September 2015, etc. This page becomes available only on the official update day, but then it stays and remains available for a long time. This page shows only critical updates.
Für aktuelle deutschsprachige Aufdatierungen entsprechend:
bzw. https://technet.microsoft.com/de-de/library/security/ms15-aug – für August 2015, und analog für andere Monate.
Motsvarande för aktuella svenskspråkiga uppdateringar:
Länken https://technet.microsoft.com/library/security/ms15-aug kan visserligen ställas om till svenska uppe tillhöger, men visas då ändå på engelska.
Now change the Windows Update service to “Manual” and start it, as described above (1. and 2.), because downloaded updates can be installed only when this service is running. Install the updates and when it is done, change the service setting from “Manual” to “Disabled” and stop the service.
Check your updates
To check them, download and install MBSA = Microsoft Baseline Security Analyzer. Start it and run a scan of your computer. This takes quite some time and at the end you will be shown all “missing” updates (including the ones you did not want to install…). If you here find an update that you really have missed, note it to download it afterwards. To find it, enter “KBxxxxxxx” in your browser search, where xxxxxxx is the number of the update.
MBSA works only when the Windows Update Service is running.
NEVER INSTALL AN UPDATE THAT HAS TO DO WITH TELEMETRY.