NO I Do Not Want Windows Ten

A Tutorial in 5 steps

For intermediate administrators.

This list of steps are compiled from several tutorials. These 1) disable Microsoft’s nagging to install windows ten, 2) prevent it from downloading or installing it anyway, and 3) removes spyware which Microsoft has been installing in stages under the pretense of a “quality improvement” program. Note that some elements have remained inactive for months or years before coming to light. This list may not catch anything the tech community still hasn’t discovered! There may be legitimate bug fixes packaged with the KBs being removed. Also, certain KBs will keep un-hiding themselves and queuing for download no matter what you do!

Please read the whole tutorial through before beginning.

Step 1

Improve your control over updates.

Go to automatic updates settings and set to ‘Download but do not install’. Also uncheck ‘Install recommended updates with critical updates’. These options may not appear at all, or in the same place depending on your edition of windows.

Step 2

Remove undesired windows updates.

Save the following text as as a batch file, and run it in a CMD window *launched as administrator*. It addresses KBs for both windows 7 and 8, so if running on windows 7, do not be concerned that a number of them display errors about not being found. Items marked “unknown” are recommended removed by well-informed admins; we’ve simply misplaced the description of what it does.

Note: you may not wish to uninstall KB3035583 as its removal is known to brick Windows Update notifications under unknown, but rare circumstances. To shut that one another way, you can edit the registry as shown further down.

# Beginning of batch file
# Launch a cmd window AS ADMINISTRATOR and run the following inside.
# Confirmation windows will open for each step so you’ll have to mind it.

# Fix for slow performance using DirectWrite API – breaks fonts
wusa /uninstall /kb:2505438 /norestart

# Platform update for windows 7 – breaks AERO and fonts
wusa /uninstall /kb:2670838 /norestart

# Reportedly pulled, uninstall it anyway if already installed
wusa /uninstall /kb:2922324 /norestart

# GWX Nagware and upgrade prep
wusa /uninstall /kb:2952664 /norestart

# Preps system for Windows 10
wusa /uninstall /kb:2976978 /norestart

# W10 Diagnostics Compatibility telemetry
wusa /uninstall /kb:2977759 /norestart

# Preps system for Windows 10
wusa /uninstall /kb:2990214 /norestart

# Preps windows 8 for Windows 10
wusa /uninstall /kb:3014460 /norestart

# Adds telemetry
wusa /uninstall /kb:3015249 /norestart

# Update to Windows 7 SP1 for performance improvements (telemetry)
wusa /uninstall /kb:3021917 /norestart

# Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3022345 /norestart

# Nags about the free Windows 10 upgrade
# This one keeps coming back over and over
# and over and over and over and over and…
wusa /uninstall /kb:3035583 /norestart

# Preps system for Windows 10
wusa /uninstall /kb:3044374 /norestart

# Unknown
wusa /uninstall /kb:3046480 /norestart

# WU service updated to accept upgrade to W10 + other fixes
wusa /uninstall /kb:3050265 /norestart

# Customer experience telemetry points
wusa /uninstall /kb:3068707 /norestart

# Customer experience and diagnostic telemetry
wusa /uninstall /kb:3068708 /norestart

# Adds telemetry points to consent.exe in Windows 8.1 and Windows 7
wusa /uninstall /kb:3075249 /norestart

# Preps system for Windows 10
wusa /uninstall /kb:3075851 /norestart

# Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3080149 /norestart

# Unknown
wusa /uninstall /kb:3083324 /norestart

# Unknown
wusa /uninstall /kb:3083710 /norestart

# Unknown
wusa /uninstall /kb:3112343 /norestart

# Updates capabilities to upgrade Win8.1 and Win7
wusa /uninstall /kb:3123862 /norestart

# Adds win10 ads to IE11 on Win7 and Win8
wusa /uninstall /kb:3139929 /norestart

# Adds win10 ads to IE11 on Win7 and Win8
wusa /uninstall /kb:3146449 /norestart

# Another Win 10 nagger
wusa /uninstall /kb:3150513 /norestart

# End of batch file.

Step 3

Keep whacking those moles.

Reboot the PC now. Search for updates again (and this can take a long time because Microsoft no longer provides sufficient resources to older windows versions). A number of the removed KBs will return! Hide the ones which return. Counsel the PC’s owner that one or two of them will still keep returning. These must not be re-installed or else the PC may need to be cleaned up again.

Step 4

Install a resident helper program.

To keep an eye on things, consider installing the GWX Control Panel, though ironically, it also adds a [10] icon to your task tray… It mostly, but does not completely, automate the task of keeping Microsoft’s nagware from re-installing itself. It does not remove KBs, but does have some handy cleanup options. It mainly just watches and warns about KB3035583 returning. It can also restore gigabytes of disk storage if windows ten install files have already been downloaded.
http://ultimateoutsider.com/downloads/

A similar utility written by a very well-respected programmer called Never Ten:
https://www.grc.com/freepopular.htm

It would be best to choose one, but not both of these resident utilities, and install it to remain resident.

Step 5

Some Registry Hacks.

Run Windows Registry Editor as admin and create the following DWORD keys or edit their existing values as shown:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GWX]
“DisableGWX”=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
“DisableOSUpgrade”=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade\State]
“AllowOSUpgrade”=dword:00000000
“ReservationsAllowed”=dword:00000000

Tips For Advanced Administrators

This section will be developed more in the future. Use your favorite search engine to find tutorials on placing IP blocks on Microsoft’s telemetry servers either in the PC’s firewall or in your router. Router-based blocks are preferred as it has been proven Windows ignores it’s own firewall to perform certain downloads and telemetry.

If you find yourself unable to perform some of these steps and need help, feel free to write me at chad@chadvanderlinden.info or call me at 512-850-6075 after 1 PM.