networking

3633 readers

1 users here now

Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.

founded 3 years ago

MODERATORS

manifex@sh.itjust.works

Block all windows update servers? (sh.itjust.works)

submitted 5 months ago by bridgeenjoyer@sh.itjust.works to c/networking@sh.itjust.works

5 comments fedilink hide all child comments

So I have a very specific use case and need to use my old backup win10 laptop for a test (only windows or mac allowed, no linux). I never connect this laptop to the internet because I need it to stay on 10 to work with specific software/hardware I have on it. But this test requires internet. How can I block the windows update servers on my VLAN? I know the second I connect this thing microslop will corrupt it to force me to update.

top 5 comments

sorted by: hot top controversial new old

[–] Otherbarry@lemmy.frozeninferno.xyz 0 points 5 months ago

Is it Windows 10 Pro or ..?

With Windows 10 Pro you can disable Windows updates by editing group policy (run gpedit.msc with elevated permissions), look for Computer Configuration / Administrative Templates / Windows Components / Windows Update and set "Configure Automatic Updates" to Disabled.

Not sure how to do that on Windows 10 Home or other versions - the above probably corresponds to registry setting(s) but am not sure which one.

[–] slazer2au@lemmy.world 0 points 5 months ago

I would use Use dns blocking.

https://learn.microsoft.com/en-us/answers/questions/457840/what-are-the-ip-ranges-for-microsofty-windows-upda

[–] InfiniteStruggle@sh.itjust.works 0 points 5 months ago

Hey, you might have trouble blocking windows 10 servers themselves, by IP or otherwise. I think it might be a lot more feasible to massgrave win 10 pro on your machine and disable updates by group policy.

[–] Paragone@lemmy.world 0 points 5 months ago

Remove all windows-machines, morelike.

For your use-case, you might want to block ALL the internet for that notebook, & then open ONLY the internet-link you require, for your test.

Trying to blacklist a dynamic-set of cloud IP-addresses seems like a losing-game.

Flip it: whitelist only what you explicitly require, for your test.

_ /\ _

[–] Onomatopoeia@lemmy.cafe 0 points 5 months ago

Use Group Policy to disable updates.

If you have a Home version, disable the Windows Update service and the Windows Update Health service which prevents the Windows Update Service from being disabled.

Hkey_local_machine\system\CurrentControlSet\Services\WaaSMedicSvc

Change the Start value to 4 (disabled).

Now you can disable the Windows Update Service.

This is a Microsoft-provided solution to this question on their forums.