Skip to content

Commit

Permalink
win: fix incorrect registry paths #446
Browse files Browse the repository at this point in the history
- Fix value name for disabling Auto Updates feature
- Fix key name for disabling search history
- Improve docs for disabling Auto Updates feature
  • Loading branch information
undergroundwires committed Dec 2, 2024
1 parent 68d30a2 commit c3f8c09
Showing 1 changed file with 29 additions and 16 deletions.
45 changes: 29 additions & 16 deletions src/application/collections/windows.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -478,7 +478,7 @@ actions:
-
function: ClearRegistryValues
parameters:
keyPath: HKCU\Software\Microsoft\Windows\v
keyPath: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery
-
function: ClearRegistryValues
parameters:
Expand Down Expand Up @@ -27693,32 +27693,45 @@ actions:
-
name: Disable Automatic Updates (AU) feature
docs: |-
This script deactivates the Automatic Updates feature in Windows. By disabling Automatic Updates,
you gain control over when your system is updated, which may be preferable in specific
privacy-sensitive environments.
This script disables the Automatic Updates feature on Windows.

The script changes a specific setting in your computer's registry, with a key called `NoAutoUpdate`, which has
two possible states [1] [2]:
Automatic Updates downloads and installs updates without requiring explicit user permission [1] [2].
When enabled, it automatically checks for updates from the Windows Update website whenever you are online [2].
By default, Automatic Updates is enabled [1] [3].

- `0`: Automatic Updates are enabled.
- `1`: Automatic Updates are disabled.
Disabling Automatic Updates provides users control over when and how updates are installed.
This enhances privacy by minimizing automatic data transfers to Microsoft servers.

By default, Windows comes with Automatic Updates enabled, meaning the `NoAutoUpdate` is set to `0` [3].
However, disabling Automatic Updates prevents the system from automatically receiving important security patches or feature updates.
This may increase your system's vulnerability to security threats if updates are not installed manually.
It is recommended to regularly check for and install updates manually to maintain system security.

Running this script will set `NoAutoUpdate` to `1`, turning off Automatic Updates [1] [2] [3].
In doing so, you prevent your computer from automatically receiving updates, which is a feature
that could be considered intrusive or unwanted in some privacy-conscious settings.
> **Caution:**
> Disabling Automatic Updates may leave the system unprotected against known vulnerabilities.
> Consider manually checking and installing updates to ensure security.

It configure your computer to not automatically download and install updates without your explicit permission.
### Technical Details

[1]: https://web.archive.org/web/20230807165936/https://learn.microsoft.com/de-de/security-updates/windowsupdateservices/18127499 "Configure Automatic Updates in a Non–Active Directory Environment | Microsoft Learn"
[2]: https://web.archive.org/web/20221001051250/https://support.microsoft.com/en-us/topic/incorrect-automatic-updates-notification-is-received-even-though-au-options-are-disabled-in-windows-8-1-and-windows-server-2012-r2-18b4b73a-3910-9408-809c-7eaad0e1fbc7 "Incorrect Automatic Updates notification is received even though AU options are disabled in Windows 8.1 and Windows Server 2012 R2 - Microsoft Support"
This script modifies the `HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate` registry value [3] [4].

The `NoAutoUpdate` setting accepts these values [4] [5]:

- `0`: Automatic Updates are enabled.
- `1`: Automatic Updates are disabled.

By default, Windows enables Automatic Updates by setting `NoAutoUpdate` to `0` [3].
This script disables Automatic Updates by setting `NoAutoUpdate` to `1` [3] [4] [5].

[1]: https://web.archive.org/web/20241202085516/https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2 "Windows Update: FAQ - Microsoft Support | support.microsoft.com"
[2]: https://web.archive.org/web/20241202090433/https://learn.microsoft.com/en-us/troubleshoot/windows-client/installing-updates-features-roles/keep-windows-up-to-date#automatic-updates-feature "How to keep Windows up to date - Windows Client | Microsoft Learn | learn.microsoft.com"
[3]: https://web.archive.org/web/20230711172555/https://learn.microsoft.com/en-us/windows/deployment/update/waas-wu-settings#configuring-automatic-updates-by-editing-the-registry "Manage additional Windows Update settings - Windows Deployment | Microsoft Learn"
[4]: https://web.archive.org/web/20230807165936/https://learn.microsoft.com/de-de/security-updates/windowsupdateservices/18127499 "Configure Automatic Updates in a Non–Active Directory Environment | Microsoft Learn"
[5]: https://web.archive.org/web/20221001051250/https://support.microsoft.com/en-us/topic/incorrect-automatic-updates-notification-is-received-even-though-au-options-are-disabled-in-windows-8-1-and-windows-server-2012-r2-18b4b73a-3910-9408-809c-7eaad0e1fbc7 "Incorrect Automatic Updates notification is received even though AU options are disabled in Windows 8.1 and Windows Server 2012 R2 - Microsoft Support"
call:
function: SetRegistryValue
parameters:
keyPath: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
valueName: Enabled
valueName: NoAutoUpdate
dataType: REG_DWORD
data: "1"
dataOnRevert: "0" # Default value: `0` on Windows 10 Pro (≥ 21H2) | `0` on Windows 11 Pro (≥ 21H2)
Expand Down

0 comments on commit c3f8c09

Please sign in to comment.