NoelC

Does anyone know why, on an otherwise completely quieted down Windows 10 system that's got the Windows Update Service disabled, the "Malicious Software Removal Tool" makes an encrypted https: (port 443) connection to spynetalt.microsoft.com (191.238.241.80)? It's tempting to think this is just an attempt to update a local database with updated malware data, to make the tool more likely to succeed, but... Why encrypt such a communication? This address resolves as a Microsoft Azure server outside Wichita, Kansas (CDN?). This is the last unexplained communication I have come across from Windows 10. -Noel

As bad as we see Win 10, I don't think the public in general agrees... Do Google searches for the quoted strings: "Windows 10 is good" "Windows 10 is bad" Believe it or not, there are about 3x as many pages matching the former as the latter. Try synonyms for good and bad, and the ratio pretty much holds up. I hate that the world is becoming so dumbed down that people think Windows 10 is actually good. -Noel

In my case I also block unwanted communications with a firewall, and distilling out and allowing just those that are necessary for it to remain convinced it's properly activated is difficult. But beyond that, Microsoft could quite easily choose to deactivate an older system, whether or not you paid for a license. Don't kid yourself into thinking you're under any different agreement than Win 10 users now. They could justify killing an older system that's not updated as being a security threat to the wonderful world of people with their heads up their... cloud. -Noel

We are brothers from a different mother, FormFiller. -Noel

I assume you're looking for SOME kind of improvement over just unchecking the [ ] Theme atlas image box. What would that be? -Noel

I can't imagine why anyone would have trusted it before. -Noel

Trouble is, I'm still not sure I have all the 'T's crossed and 'I's dotted to be able to run my Win 8.1 and 7 systems indefinitely. I found something on the Win 7 system where the "Windows Activation Validation Task" has to run every few months. I allowed it through the firewall so hopefully the next run on December 14 will just succeed. I assume something like that if not allowed to run will just kill the activation. No doubt Windows 8.1 has something like that too, but it's not in the scheduler and it's not called WatAdminSvc.exe, so I don't know which of the blocked communications is going to lead to activation failure. If I'm having trouble figuring this out, I'm imagining a lot of other folks are also going to have trouble running WIndows 8.x and 7 forever. -Noel

I STRONGLY suggest you get an SSD if you don't already have one, and make it your system drive. They're not terribly expensive and you'll never want to use an HDD-equipped system again. Reducing system drive seek time (latency) to near zero is the single best thing you can do to make a computer much more responsive. As vinifera suggests, disable indexing. That's not a trivial process to do right, but it can be done: Disable the indexing service: Click Start and type the word services in the search box.When Services (with little gears) comes up, click it.Scroll down to the Windows Search service.Right-click it and choose Properties.Change the Startup type to Disabled.Click [ Stop ] to stop the service.Delete the existing index: Click Start and type the word index in the search box.When Indexing options comes up, click it.Click the [ Advanced ] button.Click the [ Rebuild ] button to delete the index.So that you're not nagged by Windows to reenable indexing: Click Start and type folder options in the search box.In the Folder Options dialog, click the Search tab.Enable setting Don't use the index when searching in file folders for system files (searches might take longer).Ensure Library features don't try to use Indexing: Click Start and type group policy into the search box. **In the Local Group Policy Editor, navigate into:> User Configuration > Administrative Templates > Windows Components > Windows Explorer Enable setting Turn off Windows Libraries features that rely on indexed file data.Note: If you do not have gpedit.msc, the following registry value is created by the above. Delete this value to return to default behavior: [HKEY_CURRENT_USER \ Software \ Policies \ Microsoft \ Windows \ Explorer] DisableIndexedLibraryExperience REG_DWORD 1 To ensure you can search in the Start Menu: Right-click on the Start orb and choose Properties.Click the [Customize...] button at the upper-right.Scroll down to Search other files and libraries and choose the Search with public folders option.Reboot after completing all of the above. -Noel

Thank you. I think I actually DID ask you that once, now that I hear the answer, and I apologize for the repeated question. I haven't used the installer for a long time, just the manual installation .7z files. -Noel

Hey bigmuscle, I had a question and I can't recall if I asked it before (my sincere apologies if so)... I see you don't have a ModernFrame.dll link on your web page any more (unless I missed it somewhere there). Is the attempt to clean up Modern App window chrome something you're no longer developing? -Noel

Admitting something and even promising to fix it doesn't put a time frame on the actual fix. -Noel

It's funny. I've had a Win 10 configuration stable and able to run all my programs since some time in August. It even looks pretty good on the desktop. I've done my ROI investigation. As with Win 8.1 it doesn't really bring anything I NEED, per se, but there could be some intangible value to "keeping current". It's not really surprising - save for the Metro/Modern/Universal parts that I absolutely don't use, it's really just Windows 8.2 rebranded. It really works, and it could meet my business needs. All proven, end of story, right? If this had been rolled out as a Service Pack for 8.x I'd have already started the process of migrating my main system to it. But nooo, it comes with BAGGAGE. Continuous updates, forced cumulative updates, reduction in control. The PROMISE that I'll have to go through it all again in a few months. Everything about it is moving in a direction I don't need, and there are no compelling reasons (none!) to follow it. But EVEN CHOOSING TO DIVORCE MYSELF FROM MICROSOFT isn't enough. Not today. Now I have to become more and more defensive of my current systems to prevent Microsoft from trashing them! I feel sorry for most folks, who don't have the experience and knowledge to set up what I have, but I'll tell you what, I'm not all that confident either - I don't know, for example, whether if I divorce my systems from Microsoft's Windows Updates will they just invalidate my activation after a time? -Noel

Personally, given Microsoft's "holier than thou" stance on almost everything lately, and ESPECIALLY their aggressiveness at pushing GWX down our throats, I wouldn't put it past them to hide all kinds of things in port 443 communications. Only thing holding them back is that there are countries with privacy rules that would make Microsoft execs international criminals. Nothing says that for those countries windows isn't "a little different" under the covers. My firewall blocks all that, and guess what? My system is stable and runs fine. I've seen a dweeb from Microsoft trying to say that blocking communications is some form of usage agreement violation. Microsoft's new slogan: Be Evil. You might find this interesting: https://technet.microsoft.com/library/mt577208(v=vs.85).aspx#BKMK_MoreUTC -Noel

Augh what to do with the current crop of 20 important and 1 optional updates that have shown up this week. My system is stable, currently running fine for 2 weeks straight. I already see some in there that need hiding. -Noel

I suggest: http://glass8.eu/login.html Log in, then note your Machine Code and re-download to make sure you have the right key file for that machine. I've made mistakes myself and accidentally had the wrong donation.key file in place. It's easy to do when copying the contents of the Aero Glass folder around. If your machine code is not listed, you could Deactivate whatever key you want and (assuming you've donated a sufficient amount) generate a new one. You'll regain the use of the one that's deactivated after a time. -Noel

While I agree with you quite adamantly (and believe me I appreciate finding like-minded folks), I also think that they're among the most adept mediocrity managers on the planet. No one leverages junkware as well. I mean, at least SOME of what they've done (or more accurately, NOT done - i.e., create anything new of value) must be because their low-paid millennial programmers simply can't - it's beyond them to write code that even shades and rounds the corners of buttons or deal with resizeable rectangles. So what does Microsoft do? Get out the industrial sized lipstick. -Noel

How many new Windows 10 users did that "mistake" snare, I wonder? The rumblings are that further updates for older operating systems will be cumulative... Have you heard that as well? Will such updates include an accumulation of all prior Optional and Important updates? Setting up for the cumulative update process could be what all these Windows Update improvements are about. If that's what the Windows Update changes have been about all along, it looks like I was wrong in assuming I should allow them. Hats off to dencorso for seeing the landscape clearly sooner, and making the decision to exclude all of them in the original post of this thread. If you've ever hidden an update at all, I guess what to do next should be a no-brainer - the arrival of the first cumulative update will define the moment when all updates must be ceased, because in it will be the very things you've been hiding, and nothing new will be delivered without that bad baggage. I guess we should thank Microsoft for making it clearer when to stop updates entirely. As a test I tried shutting off all Windows Updates on my Win 8.1 setup by setting the Windows Update service to Disabled for a few days. Nothing bad happened. Only thing was I got a complaint through the Action Center from Windows Defender that parts of it had grown out of date. That was kind of interesting because on Win 7 it seems that software will fall back to downloading things on its own if the Windows Update service doesn't help. Anyhow, Defender might have to go by the wayside and another, more trustworthy package considered. I'm sure Microsoft feels that switching to an update process that will defy the expectations of existing Windows 8 and 7 users will up the ante and make the value proposition tilt in Microsoft's favor, bringing more people up on Windows 10. For me, since my primary reason for avoiding Windows 10 isn't because of anything technical - I have a dandy Win 10 test system setup that works fine and even looks good - it's about the change in philosophy toward users and the growing uncertainty about what Microsoft will do. Microsoft openly demonstrating more contempt for users certainly doesn't help me love them more. -Noel

Well, it does what I need. The latest release is a bit on the fresh side, but they immediately fixed a couple of bugs I reported, and it's running pretty solidly for me now. I have entirely replaced the Windows firewall setup with it. -Noel

One thing I've added in addition to what's documented above... Sphinx Windows Firewall Control This is a firewall control / management package that uses the Windows Filtering Platform under the covers. With it I've reconfigured so that my outgoing firewall policy is "deny by default", and I've built up a whitelist of programs/services and addresses that are allowed, to achieve: A quiet, private system that doesn't allow unwanted or unexpected communications.A system that runs all the programs I want and allows them to communicate as needed.Only a small level of ongoing maintenance effort to support this policy. I bought the Network/Cloud edition so I could control all my systems (Win 7, 8.1, and 10) from one central panel. The rules set took some time to develop, but I've got it pretty refined and things are pretty well nailed down now. The software presents a configurable logging and management interface, so you can see as much or as little as you want, and you can develop your own Zones (in the more expensive versions of the product) so you can be very precise. I've observed Sphinx Firewall Control blocking my Windows 8.1 system from attempting communications not only with Microsoft's servers in Redmond, but also with various Content Delivery Networks such as Edgecast and Acamai, and even now and then with some servers in countries I most certainly don't want to be communicating with! I can still pass an SFC check and do a successful Windows Update on demand. -Noel

That cinches it. At that level of aggressiveness, basically everyone but software superheros will ultimately succumb. How glad I am that I Disabled the Windows Update service. That will STILL leave us software superheros on our own to manage our old systems (and those of our closest friends). And we will be an unloved minority. We're already labeled as "haters with tin foil hats". Better get a great computer, complete with all hardware upgrades you can imagine you will need in the foreseeable future. Companies will stop making drivers for Win 7 and 8.x after a majority of folks get coerced onto Windows 10. How long does a current computer system have to last until there's a rational system with infrastructure to replace it? Another 5 to 10 years? How is it there isn't already a RAGING legal battle about this? Is it because Microsoft is giving away the software? Isn't this practice destroying the value of existing older operating system licenses? -Noel

No, that's still in there. -Noel

It would take a whole book to document. Let's try discussing individual parts. That would make the task of writing it up a bit more bite sized... What would you like to discuss first? -Noel

That could be effective, sure, but... Be aware that taking on IP address management is not to be taken lightly. Just to give you an idea of the addresses I've found that must be whitelisted to succeed in doing a Windows Update (on a Windows 10 system): 8.253.0.x 23.1.117.231 23.103.189.125 23.14.84.x 23.202.63.116 23.72.225.x 23.78.148.95 23.78.155.33 65.52.108.90 65.55.138.111 65.55.44.54 66.119.144.158 93.184.215.200 96.16.98.x 104.73.38.54 134.170.115.62 134.170.58.190 137.116.64.35 157.55.133.204 157.56.77.138 157.56.77.139 157.56.96.123 157.56.96.54 184.51.150.x And these DO change as Microsoft moves servers around, makes new partnerships with Content Delivery Networks, etc. Every single time I do a Windows Update on my Win 10 test system I have to augment/adjust the above list. I list these to illustrate that taking on IP address management in order to keep a step ahead of Windows is not a trivial task, and it does require ongoing effort. Most importantly, it requires you to be able to monitor the process directly. Using a list from someone else isn't going to work. A problem with using routing to sink particular addresses is that you won't be seeing reports of what application or service tried to access what addresses. Stuff will just fail. Then you'll be faced with the question "what do I do to make this work again?" Unless you're incredibly meticulous in taking notes and do regression testing after every change, the only viable answer may end up being "start over". Not really a viable plan. At least the approach using a "deny-by-default" firewall, assuming you pick a program that gives you good feedback in the form of a log, tells you about the successes and failures, and allows you to manage the configuration. I've set up a "deny-by-default" firewall strategy on all of my systems now (Win 7, 8.1, and 10). It turns out that once the (fairly significant) effort of initially setting everything up is done, it doesn't take that much effort to maintain it. Here's what I suggest, if you want to make sure you're keeping your private data private: Configure all the settings you can find to the most private choices.If on Win 10, run O & O Shut Up 10 to close down most privacy settings.Go through the Task Scheduler and disable the things that you don't want automatically running.Set Windows Update via gpedit.msc to manual mode.Disable the Windows Update service if you REALLY don't want it online without you. -Noel

I have a theme called Aero 7 V2 on my Win 8.1 system. It does a pretty good job of resurrecting the look and feel of Windows 7, especially the Taskbar and common controls. I've reworked the graphics atlas to modernize the look of the window chrome a bit. See also: http://www.msfn.org/board/topic/173976-craving-an-updated-ui-experience-re-skin-windows-81/ I use Big Muscle's Aero Glass for Win 8+ and UxThemeSignatureBypass tools. My system is utterly stable with this mod, which is important to me. -Noel

Sounds nice, but... It'd be nice if Microsoft would actually LISTEN to insiders and make the OS better. As it is, most are scratching their heads at how Microsoft could be ignoring smart, well thought-out insider feedback so thoroughly. I mean, one of the most requested / voted-up topics in the Feedback App going way back was "bring back Aero Glass". Yeah, we can see how well they listened to that. Don't get me wrong, I think it's awesome that brilliant-minded 3rd party developers like Big Muscle are resurrecting features that Microsoft just drops by the wayside, but Microsoft cleary has their own agenda, and it doesn't include giving users what they want. Do you think they REALLY have to break Aero Glass for Win 8+ compatibility with every new insider build? I think it's quite ironic that one of the banner features of the latest pre-release build (10525) is the resurrection of color in the title bar. Seriously, look here: http://blogs.windows.com/windowsexperience/2015/08/18/announcing-windows-10-insider-preview-build-10525/ Wow, a lot of feedback! WOW, COLOR! I'm sorry, removing something then resurrecting 15% of it does not count as progress. How many more releases before they claim, "Hey! We listened to your feedback and now you can have translucent title bars!" -Noel