Updates without rollups


  1. Posts : 1,844
    Windows 7 pro
       #1

    Updates without rollups


    Last month all I got other than a few office updates and a MSE definition update where the rollups. No individual hotfixes. I ignored the rollups since I am desperately trying to avoid the telemetry updates that M$ has posted but they seem to now only use rollups. Is that correct? Is it now impossible to avoid the telemetry updates? Should I be concerned about these rollups? Is it possible to get individual updates without the rollups?
    Last edited by townsbg; 09 Oct 2018 at 23:19.
      My Computer


  2. Posts : 1,102
    OEM Windows 7 Ult (x64) SP1
       #2

    Hi:

    Sorry, but I'm not going to step into the whole "MS telemetry is spying on me" paranoia mess.
    I am no apologist for Redmond and I do not advocate posting one's SSN on the internet.
    However, I have always found it ironic that the same folks who complain so vehemently about "telemetry" (aggregate data collection that includes information on how Windows and MS software perform in the wild) are the same folks to line up every month to berate MS for a "bad patch".

    Having said that, yes, MS changed back in October to a "Windows as a service" model for Win7 updates, similar to that for Win10.
    Then they changed it again a month or so ago (for the better).
    See here:

    MS Announces Changes to Massive Monthly Patches (7/8/8.1)

    Monthly updates are delivered via WU as a "Security+ Quality" roll-up, rather than as individual patches.

    The only user control (other than to refuse all updates -- not recommended!!!) is to take the "Security Only" roll-up, rather than the "Security+Quality" rollup.
    If you wish to manually install only the Security rollup, @Brink publishes the links to the S+Q and the S-only rollups every month.
    Here is the thread for December:

    KB3207752 and KB3205394 Update for Windows 7 SP1

    So, in brief, it is possible to manually install only the Security portion of the monthly updates, if one wishes to do so. At the very least, this is strongly recommended in order to help patch security vulnerabilities.

    Whether or not to take the full "Security+ Quality" rollup is up to the user.

    Cheers,
    MM
      My Computer


  3. Posts : 1,844
    Windows 7 pro
    Thread Starter
       #3

    Do the security rollups contain telemetry updates? When I built the system I avoided the ones I found on a thread here so I don't want to find that they have been slipped into a rollup.
      My Computer


  4. Posts : 1,102
    OEM Windows 7 Ult (x64) SP1
       #4

    Hi:

    These articles explain it better than I can:

    Microsoft fixes Windows 7 'Group B' security-only patching method

    Update to Supersedence Behaviour for Security Only and Security Monthly Quality Rollup Updates


    Cheers,
    MM

    P.S. There's always Linux, or you could follow Chuck McGill's lead.
    Last edited by MoxieMomma; 05 Jan 2017 at 05:12. Reason: Removed duplicate link
      My Computer


  5. Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       #5

    Hi,
    Yea I wouldn't worry about it security only is the way a lot of us are going
    Just opt out or make sure you're opted out of ceip for windows and various MS programs like office/ MSE/ windows live essentials/....
    There is also this method
    Callenders post on disable CEIP
    Whatever happened to that promised Windows 7 convenience rollup?
      My Computer


  6. Posts : 1,844
    Windows 7 pro
    Thread Starter
       #6

    I disabled CEIP under action center but I didn't even think to check task scheduler. I suppose I'll go with the security only updates but I'd rather not install the telemetry updates at all even if I turn off CEIP. As a side note I have the task VistaSP1CEIP in task scheduler. Could that be because I did a Vista upgrade? It has never run so perhaps it is no longer applicable.
      My Computer


  7. Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       #7

    Hi,
    Yep I'm surprised you never clean installed :)
    I believe all my upgrades went okay too but with all the preinstalled factory crapware I clean installed finally and I never regretted that because 7 was so much better
    I believe my last clean install "not my only" was about 18 months ago on my acer.

    Again like I said many MS programs have opt in/ out ceip options you might post or review them too to see what they are set at.
      My Computer


  8. Posts : 4,776
    Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
       #8

    townsbg said:
    I disabled CEIP under action center but I didn't even think to check task scheduler. I suppose I'll go with the security only updates but I'd rather not install the telemetry updates at all even if I turn off CEIP. As a side note I have the task VistaSP1CEIP in task scheduler. Could that be because I did a Vista upgrade? It has never run so perhaps it is no longer applicable.
    Suggest: Grab a copy of this and run it to easily see all info on scheduled tasks.

    Download TaskSchedulerView - MajorGeeks

    Also see: Any Windows Update patches with privacy or telemetry issues?

    Anyway telemetry is coming to Windows 7 like it or not. I try to keep it off my system. I don't have much of an issue with it but nobody clearly explained exactly what data is being collected.

    VoodooShield ? | Page 452 | Wilders Security Forums

    On any program crash the system reports the crash data to a server (although it is not connected with any scheduled task) - okay if it just reports the crash but does it record personal files in use at the time? I don't know so I disable. Personally I'd prefer it if telemetry was explained in terms of exactly what personal information (if any) gets collected with opt in / out options.

    Check for any of these using Elevated Command Prompt then type PS to switch to Powershell.

    Code:
    get-hotfix -id KB2505438,KB2670838,KB2882822,KB2902907,KB2952664,KB2976978,KB2977759,KB2990214,KB3012973,KB3015249,KB3021917,KB3022345,KB3035583,KB3044374,KB3050267,KB3046480,KB3050265,KB3050267,KB3064683,KB3065987,KB3065988,KB3068708,KB3072318,KB3074677,KB3075249,KB3075851,KB3075853,KB3078667,KB3080149,KB3081437,KB3081454,KB3083324,KB3083325,KB3083710,KB3083711,KB3112336,KB3123862
    For me - some telemetry has crept back in but it's blocked either by software or by redirecting packets by remapping router table. See Post #27 and onwards here: Static Routes - Create or Remove

    Updates without rollups-telemetry-1.jpg

    Updates without rollups-telemetry-2.jpg

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener

    Set "Enabled" value in subkeys to 0 (security only telemetry)

    Updates without rollups-telemetry-3.jpg

    Then you need to add this to registry:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection]
    "AllowTelemetry"=dword:00000000
    "DisableEnterpriseAuthProxy"=dword:00000001

    December 2016 - one of these:

    Updates without rollups-view-update-history.jpg

    Added this (I log all file changes during Windows Updates)

    Code:
    C:\Windows\SoftwareDistribution\Download\1f3d99e62ba907ed768b08c0e5cf3b0b\amd64_microsoft-windows-lua_31bf3856ad364e35_6.1.7601.23593_none_04a2504c8cca91cf\consent.exe
    C:\Windows\winsxs\amd64_microsoft-windows-lua_31bf3856ad364e35_6.1.7601.23593_none_04a2504c8cca91cf\consent.exe
    C:\Windows\winsxs\Temp\a970394a7e55d201db0c0000d409500e\a05cba4a7e55d201390d0000d409500e_consent.exe
    Certain updates add telemetry points to consent.exe and this time around a completely new consent.exe was installed.

    Basically if you want to stop it you will be fighting a losing battle.

    RE: Security only updates. If you go down that route expect stuff to stop working eventually. How about all those Windows 7 users who only installed security patches and thus got the infamous Windows Update high RAM usage or not working problem?
    Last edited by Callender; 06 Jan 2017 at 16:56. Reason: edit update list
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:07.
Find Us