{"id":1396,"date":"2018-03-11T10:00:29","date_gmt":"2018-03-11T10:00:29","guid":{"rendered":"http:\/\/beta.webuildsolutions.com\/?p=1"},"modified":"2019-08-29T11:00:45","modified_gmt":"2019-08-29T16:00:45","slug":"hello-world-2","status":"publish","type":"post","link":"https:\/\/www.webuildsolutions.com\/index.php\/2018\/03\/11\/hello-world-2\/","title":{"rendered":"Microsoft forces Win10 1709 upgrades on PCs"},"content":{"rendered":"<p>Just when you thought Win10 Fall Creators Update was finally <a href=\"https:\/\/www.askwoody.com\/2018\/microsoft-claims-its-solved-the-usb-problem-with-win10-1709-cumulative-update-kb-4090913\/\" rel=\"nofollow\">starting to look stable<\/a>, Microsoft pulled another tone-deaf move. Reports <a href=\"https:\/\/www.askwoody.com\/2018\/report-win10-users-being-pushed-onto-1709-even-if-they-have-feature-updates-deferred\/\" rel=\"nofollow\">have been pouring in <\/a>from people who were forced to upgrade from Win10 1607 (the Anniversary Update) or Win10 1703 (the First Spring Creators Update) to the latest version of the last edition of Windows, Win10 1709<\/p>\n<p>This isn\u2019t the first time Microsoft has forced Win10 1709 upgrades onto machines that were specifically set to prevent the upgrade. Forced upgrades snared Win10 customers previously on two occasions:<\/p>\n<ul>\n<li>In <a href=\"https:\/\/www.computerworld.com\/article\/3237172\/microsoft-windows\/microsoft-forces-win10-1703-customers-onto-1709-and-other-patch-tuesday-shenanigans.html\">mid-November 2017<\/a>, Microsoft pushed many Win10 1703 customers with \u201cCurrent Branch for Business\u201d selected onto 1709.<\/li>\n<li>In <a href=\"https:\/\/www.computerworld.com\/article\/3247754\/microsoft-windows\/reports-say-win10-creators-update-users-are-being-forced-to-fall-creators-update-again.html\">mid-January 2018<\/a>, Microsoft pushed many Win10 1703 customers onto 1709, even though they had \u201cfeature update\u201d deferrals set to 365 days.<\/li>\n<\/ul>\n<p>Neither of those pushed upgrades were announced in advance.<\/p>\n<aside class=\"nativo-promo nativo-promo-1 smartphone\"><\/aside>\n<p>Last Monday, a new and largely overlooked Knowledge Base article, <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4023814\/some-versions-of-windows-10-display-a-notification-to-install-the-late\" rel=\"nofollow\">KB 4023814<\/a>, warned that:<\/p>\n<blockquote><p>If you&#8217;re currently running Windows 10 Version 1507, Version 1511, Version 1607 or Version 1703, you can expect to receive a notification that states that your device has to have the latest security updates installed. Windows Update will then try to update your device\u2026<\/p>\n<p>Windows 10 version 1607 and version 1703 are not yet at &#8220;end of service.&#8221; However, they must be updated to the latest versions of Windows 10 to ensure protection from the latest security threats.<\/p><\/blockquote>\n<p>Which seems to imply that Microsoft isn\u2019t going to put much effort into security patches for Win10 1607 or 1703 any more, regardless of their end-of-service dates. As of this moment, Win10 1607 Home and Pro <a href=\"https:\/\/www.askwoody.com\/tag\/win10-end-of-service\/\" rel=\"nofollow\">hit end of service <\/a>next month (1607 Enterprise and Education have been extended to Oct. 9). Win10 1703 Home and Pro reach end of service in October (1703 Enterprise and Education stretch out to April \u00a02019).<\/p>\n<p>This latest pushed upgrade seems to involve an obscure setting called the Diagnostic Data level. As best I can tell, Win10 1607 and 1703 machines with the Diagnostic Data level set to zero \u2013 the <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/configuration\/configure-windows-diagnostic-data-in-your-organization#diagnostic-data-levels\" rel=\"nofollow\">\u201cSecurity\u201d setting<\/a>\u00a0\u2013 are getting forced onto Win10 version 1709. Those who send more data to Microsoft \u2013 say, the \u201cBasic Health &amp; Quality\u201d level \u2013 don\u2019t seem to be getting the forced upgrade.<\/p>\n<p>Put another way, if this analysis is correct: if you\u2019ve set your machine to send the minimum amount of telemetry to Microsoft, you\u2019re going to get upgraded.<\/p>\n<aside class=\"nativo-promo nativo-promo-1 tablet desktop\"><\/aside>\n<p>Moreover, this forced upgrade <strong><i>doesn\u2019t go through Windows Update<\/i><\/strong>. It happens even if you\u2019ve turned the Windows Update service off. <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/report-win10-users-being-pushed-onto-1709-even-if-they-have-feature-updates-deferred\/#post-173549\" rel=\"nofollow\">Per @abbodi86<\/a>:<\/p>\n<blockquote><p>The upgrade to the latest Windows 10 version is being delivered in two ways now: The usual one through Windows Update, which I suppose respects deferral settings\/policies; and one through Update Assistant, which may not comply with deferral settings\/policies.<\/p><\/blockquote>\n<p>Both the<a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4077525\" rel=\"nofollow\"> KB 4077525<\/a> (OS Build 14393.2097) Win10 1607 cumulative update article and the<a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4077528\" rel=\"nofollow\"> KB 4077528<\/a> (OS Build 15063.936) Win10 1703 cumulative update article contain this cryptic warning:<\/p>\n<blockquote><p>Windows Update Improvements<\/p>\n<p>Microsoft has released an update directly to the Windows Update client to improve reliability. Any device running Windows 10 configured to receive updates automatically from Windows Update, including Enterprise and Pro editions, will be offered the latest Windows 10 Feature Update based on device compatibility and Windows Update for Business deferral policy. This does not apply to long-term servicing editions.<\/p><\/blockquote>\n<p>And the <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/deployment\/update\/waas-configure-wufb\" rel=\"nofollow\">Configure Windows Update for Business site<\/a> says:<\/p>\n<blockquote><p>For Windows Update for Business policies to be honored, the Diagnostic Data level of the device must be set to 1 (Basic) or higher. If it is set to 0 (Security), Windows Update for Business policies will have no effect.<\/p><\/blockquote>\n<p>How \u201cWindows Update for Business policies\u201d override Windows settings escapes me.<\/p>\n<p>How can you tell if your machine has its Diagnostic Data level set to zero? The easiest way I\u2019ve found is to go into the Settings Feedback &amp; diagnostics pane (Start &gt; Settings &gt; Privacy &gt; Feedback &amp; diagnostics; see screenshot); if either Basic or Full is checked, you\u2019re fine.<\/p>\n<p>If those options are grayed out, it\u2019s possible your Diagnostic Data level has been set to zero through a Group Policy (or maybe a registry?) setting. The Diagnostic Data level can be set through the Group Policy editor (<span class=\"skimlinks-unlinked\">GPedit.msc<\/span>) at Computer Configuration &gt; Administrative Templates &gt; Windows Components &gt; Data Collection and Preview Builds &gt; Allow Telemetry.<\/p>\n<p>I\u2019ve <a href=\"https:\/\/twitter.com\/juzuo\/status\/971787539110653954\" rel=\"nofollow\">seen reports<\/a> that running the O&amp;O Shutup10 tool can, in some circumstances at least, set the Diagnostic Data level to zero.<\/p>\n<p>It looks like you can roll back from 1709 to your previous version, as long as you haven\u2019t run a disk cleanup in the interim. Click Start &gt; Settings &gt; Update &amp; security &gt; Recovery. Under Go back to the previous version of Windows 10, click Get started. And pray.<\/p>\n<aside class=\"nativo-promo nativo-promo-2 tablet desktop smartphone\"><\/aside>\n<p>Windows 10 is the gift that keeps on giving.<\/p>\n<p><i>Thx to @juzuo, @abbodi86, @EP, @bobcat5536, @EyesOnWindows, and many others on the<\/i><a href=\"https:\/\/www.askwoody.com\/forums\/topic\/report-win10-users-being-pushed-onto-1709-even-if-they-have-feature-updates-deferred\/#post-173580\" rel=\"nofollow\"><i> AskWoody Lounge<\/i><\/a><i>.<\/i><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Just when you thought Win10 Fall Creators Update was finally starting to look stable, Microsoft pulled another tone-deaf move. Reports have been pouring in from people who were forced to upgrade from Win10 1607 (the Anniversary Update) or Win10 1703 (the First Spring Creators Update) to the latest version of the last edition of Windows,<\/p>\n","protected":false},"author":1,"featured_media":1360,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rs_blank_template":"","rs_page_bg_color":"","slide_template_v7":"","footnotes":""},"categories":[16],"tags":[27,39,40],"class_list":["post-1396","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it-security","tag-bugs","tag-win10","tag-windows-10"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/posts\/1396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/comments?post=1396"}],"version-history":[{"count":0,"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/posts\/1396\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/media\/1360"}],"wp:attachment":[{"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/media?parent=1396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/categories?post=1396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.webuildsolutions.com\/index.php\/wp-json\/wp\/v2\/tags?post=1396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}