While I realize this might be time-consuming, this method prevented almost every Patch Tuesday issue I've ever experimented with.Tip: If you're feeling particularly brave, or have never had problems with Windows updates before, try installing updates together as a group, something that I've also had a lot of success with. NET updates of a particular version together, all of the operating system security updates together, etc.
It was the reactions to this tweet that really surprised me: When you position this article from a year ago next to the hundreds of thousands of machines that have just had their files encrypted, it's hard to conclude that it in any way constitutes good advice.
Without doing a thing, when Wanna Cry came along almost 2 months later, the machine was protected because the exploit it targeted had already been patched.
It's because of this essential protection provided by automatic updates that those advocating for disabling the process are being labelled the IT equivalents of anti-vaxxers and whilst I don't fully agree with real world analogies like this, you can certainly see where they're coming from.
Microsoft doesn’t recommend disabling automatic update, but the company has no solution for users who can’t spare the bandwidth to download the OS, but don’t want the update.
Microsoft has stressed that end users who begin the upgrade process will still have the option to say “No” before the upgrade begins, but I’m dubious of this for several reasons.