Fresh win 7 ultimate

Just formated and such. Was wondering what updates I should install/uninstall for security and privacy? I heard alot of updates are not needed or are unwanted. I also hear and understand wind
7 has updates that spy/try to convert you to 10. I have seen command promts and such to disable them but I thought I would ask the more talented folks here
Trying to get the most out of my pc but keep privacy up and security :O

and for the first mass of updates on install. Should I install them all? Also how do I disable remote desktop I am trying to find that on google.

Thx I was concerened they were loging everything and watching all my moves. I am very private. Just like I am currently trying to find a low resources browser that is secure/private/fast and low on resources.

"--------------------------------------
Windows 7 -> Windows 10 and Telemetry Updates - The Definitive List

KB2952664: Compatibility update for upgrading Windows 7
"This update helps Microsoft make improvements to the current operating system in order to ease the upgrade experience to the latest version of Windows."

KB2977759: Compatibility update for Windows 7 RTM
"This update performs diagnostics on the Windows systems that participate in the Windows Customer Experience Improvement Program. These diagnostics help determine whether compatibility issues may be encountered when the latest Windows operating system is installed. This update will help Microsoft and its partners ensure compatibility for customers who want to install the latest Windows operating system."

KB3021917: Update to Windows 7 SP1 for performance improvements
"This update performs diagnostics in Windows 7 Service Pack 1 (SP1) in order to determine whether performance issues may be encountered when the latest Windows operating system is installed. Telemetry is sent back to Microsoft for those computers that participate in the Windows Customer Experience Improvement Program (CEIP)."

KB3035583: Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
"This update installs the Get Windows 10 app, which helps users understand their Windows 10 upgrade options and device readiness."

KB3068708: Update for customer experience and diagnostic telemetry
"This update introduces the Diagnostics and Telemetry tracking service to existing devices. By applying this service, you can add benefits from the latest version of Windows to systems that have not yet upgraded."

KB3075249: Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
"This article describes an update that adds telemetry points to consent.exe in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 7 Service Pack 1 (SP1), and Windows Server 2008 R2 SP1. Before you install this update, check out the Prerequisites section."

KB3080149: Update for customer experience and diagnostic telemetry
"This package updates the Diagnostics and Telemetry tracking service to existing devices. This service provides benefits from the latest version of Windows to systems that have not yet upgraded. The update also supports applications that are subscribed to Visual Studio Application Insights."

KB3083710: Windows Update Client for Windows 7 and Windows Server 2008 R2: October 2015
"This article describes an update that contains some improvements to Windows Update Client in Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1."

KB3102810: Installing and searching for updates is slow and high CPU usage occurs in Windows 7 and Windows Server 2008 R2
"This article describes an update that contains some improvements to Windows Update Client in Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1."
"The Svchost.exe process occupies 100 percent of CPU usage when you upgrade a Windows Update client to Windows 10."

--------------------------------------
Superseded:

KB2990214: Update that enables you to upgrade from Windows 7 to a later version of Windows (superseded by KB3050265)
"This article describes an update that enables you to upgrade your computer from Windows 7 Service Pack 1 (SP1) to a later version of Windows."

KB3022345: Update for customer experience and diagnostic telemetry (superseded by KB3068708)
"This update introduces the Diagnostics and Telemetry tracking service to in-market devices. By applying this service, you can add benefits from the latest version of Windows to systems that have not yet been upgraded. The update also supports applications that are subscribed to Visual Studio Application Insights."

KB3050265: Windows Update Client for Windows 7: June 2015 (superseded by KB3065987)
"General improvements are made to support upgrades to a later version of Windows."

KB3065987: Windows Update Client for Windows 7 and Windows Server 2008 R2: July 2015 (superseded by KB3075851)
"This article describes an update that contains some improvements to Windows Update Client in Windows 7 Service Pack 1 (SP1) or Windows Server 2008 R2 SP1. This update is incompatible with Windows Server Update Services (WSUS) servers without the hardening update 2938066."

KB3075851: Windows Update Client for Windows 7 and Windows Server 2008 R2: August 2015 (superseded by KB3083324)
"This article describes an update that contains some improvements to Windows Update Client in Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1. This update also resolves an issue in which certain Windows Update operations fail when you install Windows Update Client for Windows 7 and Windows Server 2008 R2: July 2015 (3065987) on Windows 7 Embedded editions."

KB3083324: Windows Update Client for Windows 7 and Windows Server 2008 R2: September 2015 (superseded by KB3083710)
"This article describes an update that contains some improvements to Windows Update Client in Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1."

--------------------------------------
Problematic:

KB3064209 June 2015 Intel CPU microcode update for Windows
"This update fixes several issues with Intel CPUs that could cause computer crashes or functions incorrectly. Also, this update improves the reliability of computers that uses certain Intel CPUs."

Even though this update is not Windows 10 or Telemetry related, it is controlling your hardware and is outside the scope of what a OS should be doing. I have not added it to the commands, but it shouldn't be that hard to avoid.

This update is causing boot-loops on Windows 10, and some have claimed that it is persisting to fresh installs of Windows 8.x and 7. More info can be found in the following links:

Tom's Hardware: KB3064209 overclocking
Intel Forums: G3258 and Windows 10 Problem |Intel Communities

A workaround if you have already installed this update is explained in post #138

--------------------------------------
Others:

KB3081954: Update for Work Folders improvements in Windows 7 SP1
"This update adds telemetry data points to Work Folders for Asimov telemetry pipeline in Windows 7 Service Pack 1 (SP1). This update also supports users to continue using Work Folders after they upgrade from Windows 7 SP1 to Windows 10."

--------------------------------------

Run cmd as Administrator and issue these commands:
(Credits to Daz)

Code:
wusa /uninstall /kb:2952664 /norestart
wusa /uninstall /kb:2977759 /norestart
wusa /uninstall /kb:2990214 /norestart
wusa /uninstall /kb:3021917 /norestart
wusa /uninstall /kb:3022345 /norestart
wusa /uninstall /kb:3035583 /norestart
wusa /uninstall /kb:3050265 /norestart
wusa /uninstall /kb:3065987 /norestart
wusa /uninstall /kb:3068708 /norestart
wusa /uninstall /kb:3075249 /norestart
wusa /uninstall /kb:3075851 /norestart
wusa /uninstall /kb:3080149 /norestart
wusa /uninstall /kb:3083324 /norestart
wusa /uninstall /kb:3083710 /norestart
wusa /uninstall /kb:3102810 /norestart

Others:
wusa /uninstall /kb:3081954 /norestart
--------------------------------------

*This only applies if you have more than one instance if KB2952664. For example; if you update a "official" MS ISO with the latest simplix update pack, you will only have one version of KB2952664. Therefore the wusa command will work to remove KB2952664 in that scenario.

Yen said: ↑
The kb2952664 cannot be uninstalled with the commands you have posted. There is no notice about when uninstalling but it persists.

Instead of you have to check which versions of kb2952664 have been installed on your PC:
Code:
dism /online /get-packages | findstr KB2952664
Then uninstall it(them) by changing the version(s) shown
Code:
dism /online /remove-package /PackageName:Package_for_KB2952664~31bf3856ad364e35~amd64~~6.1.1.3
Replace 6.1.1.3 (or the entire string if you have 32 bit windows) with the version(s) shown and run it for each version separately.
Click to expand...
--------------------------------------

Add the following two registry entries from an administrative command prompt...

Code:
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\Gwx /v DisableGwx /t REG_DWORD /d 1 /f
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DisableOSUpgrade /t REG_DWORD /d 1 /f
Delete the contents of C:\Windows\SoftwareDistribution\Download\ and remove the C:\$WINDOWS.~BT folder (if present).

Code:
del /f /s /q c:\Windows\SoftwareDistribution\Download\*
rd /s /q C:\$WINDOWS.~BT
Reboot..."


That is what I am saying I am seeing on a site. Is that any use

Also I have encountered this issue ans saw a topic that could solve it have you heard of this

"Fix for updates that will prevent your operating system from downloading and installing updates if you have one of the following CPUs:

Intel seventh (7th)-generation processors (Kaby Lake) or later

AMD "Bristol Ridge" (Seventh generation) or newer

Qualcomm "8996""

I want to get my cpu updated running safe secure and proper but I don't know what to download or do without messing everything up again

simplix avoids telemetry stuff

simplix

Download

Just d/l ( unblock the downloaded file as always , rt click>properties>unblock>apply>ok ) then run it.