mirror of
https://github.com/NexusOne23/noid-privacy.git
synced 2026-02-07 12:11:53 +01:00
57 lines
2.7 KiB
JSON
57 lines
2.7 KiB
JSON
{
|
|
"Description": "Simple Windows Update Configuration - MS Best Practice (GUI Settings Only)",
|
|
"Documentation": "Matches Windows Settings > Windows Update > Advanced options",
|
|
"Purpose": "Enable immediate updates from Microsoft using Windows built-in settings",
|
|
|
|
"Settings": {
|
|
"1_ReceiveUpdatesImmediately": {
|
|
"Name": "Get the latest updates as soon as they're available",
|
|
"RegistryPath": "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate",
|
|
"Values": {
|
|
"AllowOptionalContent": {
|
|
"Type": "DWord",
|
|
"Value": 1,
|
|
"Description": "Policy: enable optional content & configuration updates immediately (grays out GUI toggle)"
|
|
},
|
|
"SetAllowOptionalContent": {
|
|
"Type": "DWord",
|
|
"Value": 1,
|
|
"Description": "Policy: enforce AllowOptionalContent setting (managed by organization)"
|
|
}
|
|
},
|
|
"GUIPath": "Settings > Windows Update > Advanced options > Get the latest updates as soon as they're available"
|
|
},
|
|
|
|
"2_MicrosoftUpdate": {
|
|
"Name": "Receive updates for other Microsoft products",
|
|
"RegistryPath": "HKLM:\\SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings",
|
|
"Values": {
|
|
"AllowMUUpdateService": {
|
|
"Type": "DWord",
|
|
"Value": 1,
|
|
"Description": "Get updates for Office, drivers, and other Microsoft products with Windows Update"
|
|
}
|
|
},
|
|
"GUIPath": "Settings > Windows Update > Advanced options > Receive updates for other Microsoft products"
|
|
},
|
|
|
|
"3_DeliveryOptimization": {
|
|
"Name": "Downloads from other devices (DISABLED for privacy)",
|
|
"RegistryPath": "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\DeliveryOptimization",
|
|
"Values": {
|
|
"DODownloadMode": {
|
|
"Type": "DWord",
|
|
"Value": 0,
|
|
"Description": "0 = HTTP only (Microsoft servers), no P2P, no LAN sharing"
|
|
}
|
|
},
|
|
"GUIPath": "Settings > Windows Update > Advanced options > Delivery Optimization > Allow downloads from other devices = OFF"
|
|
}
|
|
},
|
|
|
|
"TotalRegistryKeys": 4,
|
|
"MSBestPractice": "These are the EXACT settings shown in Windows Settings GUI - no hidden schedules, no auto-reboot config",
|
|
"UserControl": "User keeps full control over installation timing via Windows Settings (except Setting 1 is enforced by policy if enabled)",
|
|
"NoInteractivePrompt": "No mode selection needed - simple ON/ON/OFF configuration",
|
|
"CRITICAL_NOTE": "Setting 1 uses Policies\\Microsoft\\Windows\\WindowsUpdate (AllowOptionalContent/SetAllowOptionalContent) and will appear as 'managed by organization'. Setting 2 MUST use UX\\Settings path (NOT Policies path) to avoid locking the Microsoft Update toggle."
|
|
}
|