Repository navigation
Version 1.6.1: notify-only Windows Update security mode, hardening, fixes - #23
Merged
Merged
Conversation
…ixes - Windows Update "Security" mode: security updates are not deferred but only notified (AUOptions 2); the user downloads, installs and restarts. Drivers excluded, feature updates deferred 365 days, policies that hide update notifications are cleared and backed up. On Windows Home a dialog explains which parts the edition ignores. - Presets no longer re-enable update tasks Windows ships disabled, and a clean install is detected as Default instead of Custom (tested in a Windows 11 VM). - Elevated output through a private named pipe instead of %TEMP% files, system folder variables reset in every script, running services stopped before deletion, elevated startup scans by another admin read the right user hive. - Dialog no longer crashes when its button is pressed as it closes. - 534 translation fixes and a test for untranslated text; USB devices in D3 are not woken by the Connections scan; Interrupt/Affinity tabs reuse the scan. - README gallery refreshed with Startup and Drivers, personal data pixelated.
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
AUOptions 2): the user downloads, installs and restarts, with no automatic restart while signed in. Drivers stay excluded and feature updates are deferred 365 days. Every preset clears the policies that hide update notifications, and they are included in the backup.WakeUpAndScanForUpdates) are no longer re-enabled. A clean install is detected as Default instead of Custom.%TEMP%files;PSModulePathare reset in scripts;crash.log);Testing
dotnet test: 396/396. Release build: 0 warnings.AUOptions=2,NoAutoRebootWithLoggedOnUsers=1,ExcludeWUDriversInQualityUpdate=1and a 365-day feature deferral, and clears the notification policies. TheWakeUp*tasks stay disabled, the preset is detected as Security, and switching back to Default is detected as Default. Original state restored afterwards.