Windows customers generally have the impression that the working system has a lifetime of its personal and doesn’t permit any contradictions.
Some restrictions are meant to make sure the safety of the working system, which is comprehensible. Regular system updates, for instance, are clearly crucial. However, many customers would like to determine for themselves what and, above all, when one thing is put in.
In some instances, the blockade might be lifted with on-board instruments — and generally extra simply with instruments that we current to you right here.
Control Windows updates
Updates are supposed to enhance the safety of the working system and repair bugs. Sometimes the other is the case and an replace paralyzes the pc or particular person features.
Microsoft tries to cut back errors by delivering updates in waves, one after the opposite. If issues happen, the corporate can withdraw updates once more.
Mark Hachman / IDG
Windows updates are significantly annoying if you wish to use the pc shortly after a restart, however then solely see the replace progress bar.
Reduce updates with on-board instruments: Windows provides two choices for controlling updates with each version, however it’s a must to activate them in good time. Go to “Windows Update” within the “Settings” (name with Win+I).
Under “Pause updates” you’ll be able to cease updates for as much as seven weeks. After that, it’s essential to set up all accessible updates in order that the auto-update might be paused once more.
Windows 10 customers go to “Update & Security > Windows Update” and click on on “Pause updates for 7 days” or, for an extended interval, on “Advanced options,” the place you’ll be able to set an finish date beneath “Stop until.”
The second possibility might be discovered within the “Settings” beneath “Network & internet > Ethernet” or “Network and Internet > WLAN.” Activate the swap behind “Metered connection.”
In Windows 10, you continue to must click on on “Ethernet” or the Wi-Fi connection to see the swap.
However, neither setting fully switches off the Windows replace. Security-related updates specifically are nonetheless put in, however the complete quantity of downloads is considerably decreased because of this.
‘Secret’ settings for the Windows replace
You can lengthen the replace pause interval. To do that, open the registry editor, create the important thing
Hkey_Local_MachineSoftwareMicrosoftWindowsUpdateUXSettings
and in it the Dword worth (32-bit) FlightSettingsMaxPauseDays with the content material
00001c84
(hexadecimal). This corresponds to 7300 days, i.e. 20 years, which now you can set as an replace pause.
If you need to deactivate the automated replace, create the important thing
Hkey_Local_MachineSoftwarePoliciesMicrosoftWindowsWindowsUpdate
and in it the Dword worth
NoAutoUpdate
with the content material 1. Windows then routinely downloads no or just a few updates, however you’ll be able to provoke the obtain at any time beneath “Windows Update” by clicking on “Check for updates.”

Reduce updates: Configure the Internet connection as a “Metered connection.” Windows will then solely obtain security-relevant updates.
Foundry
Disable Windows updates fully: If you actually need to swap off Windows updates fully, use the Windows Update Blocker instrument. Select the “Disable updates” possibility and click on on “Apply now.”
The instrument deactivates all companies which can be answerable for updates and ensures that they aren’t reactivated. Only deactivate the Windows replace whether it is really crucial.
Once you’ve gotten reactivated it, it’s best to set up all lacking updates as shortly as potential.

Temporarily do with out all updates: Use Windows Update Blocker to modify off the replace operate to forestall disruptions brought on by updates.
Windows Update Blocker
Defuse Microsoft Defender
Virus scanners are sometimes unable to acknowledge malware past doubt. To be on the protected facet, the safety software program warns of something that might be probably harmful.
This could also be software program that’s categorized as harmful just because it has been downloaded from the web and isn’t (but) recognized to the virus scanner.
In precept, there’s little to criticize about this process. The virus scanner protects most Windows customers from dangerous electronic mail attachments or the obtain of malware. However, skilled customers are sometimes hindered by the beginning prohibitions.
Partially deactivate Microsoft Defender: Only perform the next actions in case you are certain. If doubtful, test a file at www.virustotal.com for malware and get a second opinion.

Paralyze the virus scanner: Disable real-time safety to let you begin applications that Defender mistakenly classifies as malware.
IDG
If Microsoft’s antivirus safety reviews while you obtain or begin a program, go to “Privacy & security” within the “Settings” and click on on “Windows Security.”
Continue with “Virus & threat protection” and click on on “Manage settings” beneath “Virus & threat protection settings.”
Here you’ll be able to deactivate “Real-time protection,” which implies that Microsoft Defender will now not scan new recordsdata. Windows doesn’t bear in mind the setting completely and routinely reactivates real-time safety after some time.
Under “Exclusions” you’ll be able to click on on “Add or remove exclusions” and “Add exclusion” to specify recordsdata and/or folders that the virus scanner shouldn’t scan.
This is really helpful, for instance, for the challenge directories of improvement environments or folders wherein you obtain recordsdata that Microsoft Defender prohibits.

Prevent virus scan: Add a folder to the exclusions if you don’t want Microsoft Defender to scan the recordsdata in it.
Foundry
Configure Microsoft Defender extra simply and shortly
The settings beneath “Windows Security” usually are not significantly clear. The free Defender UI instrument has got down to enhance this.
When you begin it for the primary time, choose the language on the prime of the window. The instrument exhibits a number of safety profiles and also you often choose “Recommended.” The particulars might be discovered within the descriptions.
Click on the “i” within the settings to acquire explanations of the results. On the “DefenderGuard” tab, you’ll be able to specify the time interval till automated reactivation earlier than “Real-time protection.”
Use the Defender Exclusion Tool to shortly configure the exception record. Use the button within the toolbar to specify a folder that you just need to exclude from the virus scan.

Configure Microsoft Defender extra shortly: Defender UI provides a transparent interface the place you’ll be able to shortly discover a very powerful settings.
Defender UI
Defender Control can disable Windows safety fully. However, Windows understandably doesn’t permit this: Software that wishes to modify off virus safety is straight away categorised as a risk.
You ought to subsequently add the folder wherein you unpack the instrument to the exclusion record. The obtain from the producer is protected with the password sordum, which you enter when unpacking. Otherwise, the virus scanner would instantly take away the instrument if real-time safety is activated.
However, it’s essential to nonetheless deactivate real-time safety manually earlier than beginning the instrument, as described above. In addition, set the swap beneath “Tamper protection” to “Off” within the “Virus and threat protection settings.”

Edit the exclusion record extra simply: With Defender Exclusion Tool, you’ll be able to shortly add recordsdata or folders to the record that the virus scanner shouldn’t scan.
Defender Exclusion Tool
Once Defender Control has been began efficiently, first go to “Menu > Add Defender Control to the white list.” The instrument is then ignored by the real-time safety.
Use the “Disable Windows Defender” button to modify off “Virus & Threat Protection” fully and click on on “Enable Windows Defender” to modify it on once more.
Configure Smartscreen filter and Attachment Manager
Smartscreen is one other part of Microsoft Defender and is designed to guard your PC from malicious web sites and downloads. When you open a web site or obtain a file in Microsoft Edge, Smartscreen checks the popularity of the provide.
If a web site is on the blacklist, entry is blocked. The hash worth is checked for downloads. If the software program is unknown, Windows categorizes it as probably harmful.
The begin ban usually applies to all downloads, even if you happen to use a unique browser.

Start blockade: Smartscreen can stop applications from beginning just because Microsoft Defender isn’t but conscious of the file.
Foundry
If you usually need to do with out Smartscreen, go to “Privacy & security > Windows Security” within the “Settings” (Windows 10: “Update & security > Windows Security”). Click on “App and browser control” after which on “Reputation-based protection settings.” Set the switches for the specified choices to “Off.”
However, these settings don’t stop downloads from being prohibited. To do that, it’s essential to additionally deactivate real-time safety or add the obtain folder to the exclusion record. However, you might be then answerable for the safety of web site visits and downloads.
Additional measures: By default, Windows supplies downloads with an (invisible) NTFS stream that certifies their origin and might stop them from beginning. You can acknowledge the stream within the properties of a file. On the “General” tab, the entry “The file originates from another computer. Access may have been blocked for security reasons.”
Tick the “Allow” field and click on “OK” to take away the NTFS stream. To stop Windows from including a stream to the downloads, create the next key within the registry
Hkey_Current_UserSoftware MicrosoftWindowsCurrentVersionPolicies Attachments
and in it the Dword values (32-bit)
SaveZoneInformation
and
ScanWithAntiVirus
every with the info 1.
Bypassing the improve ban on Windows 11
Windows 11 locations increased calls for on {hardware} than Windows 10. You can discover out which necessities apply from Microsoft.
However, most specialists agree that there are just a few technical causes for the {hardware} necessities of Windows 11. Windows 11 usually runs easily and with none noticeable lack of efficiency on earlier Windows 10 PCs.
If you need, you’ll be able to attempt it out for your self and set up Windows 11 alongside Windows 10. An improve can be potential.
The system necessities for Windows 11 are checked by the setup program and might be bypassed. This labored in our checks as much as and together with model 24H2.
However, it can’t be dominated out that Microsoft will stop the set up or improve on formally unsupported {hardware} sooner or later. To be on the protected facet, it’s best to subsequently create a whole backup of your system. (See our suggestions for best Windows backup software.)
To reinstall or improve, you have to the Windows 11 ISO file, the Rufus instrument and a USB stick. Enter the ISO file in Rufus after clicking on “Select.” Set your set up stick beneath “Drive.”

Create an set up stick: Rufus transports the content material of an ISO file to the USB stick. This can be appropriate for putting in Windows 11 on unsupported {hardware}.
Rufus
Click on “Start” and tick the field “Remove requirements for 4GB RAM, Secure Boot and TPM 2.0.” If desired, activate additional choices. Confirm with “OK” and after checking the accurately chosen drive, click on “OK” once more.
For an improve, begin “Setup.exe” from the set up stick. If Windows 11 is to be put in alongside Windows 10, you have to an empty partition or a second arduous drive.
You can scale back the dimensions of the present Windows partition utilizing Disk Management or Minitool Partition Wizard Free. Boot the PC from the set up stick and enter the ready partition because the goal drive. You can alter the boot sequence later with Bootice.
Use another instrument: Use the Win11 Bypass instrument to create a custom-made ISO file for a semi-automatic Windows set up with out {hardware} test. Click on “Customize response file” and enter the person title, password, laptop title, and community workgroup. Click on “Create ISO file.”
You can use the ISO file if you wish to check out Windows 11 in Virtualbox, for instance. You can even put together a USB follow Ventoy. Ventoy provides the benefit over Rufus which you could retailer a number of ISO recordsdata on the stick and boot the PC from it.
Retrofitting Pro features within the Home Edition
The Windows Home version lacks some features which can be accessible within the Pro version. This isn’t a critical shortcoming as a result of you’ll be able to notice a lot of the features with free instruments.
Veracrypt, for instance, can be utilized as a alternative for Bitlocker, and you’ll arrange digital PCs with Virtualbox as an alternative of Hyper-V.
The solely factor lacking is the editor for native group insurance policies, which directors can use to outline particular person person rights intimately. It might be helpful for professionals if a number of folks use the PC and also you need to prohibit sure settings.
You can use the standalone Policy Plus editor. If you utilize this to vary the insurance policies and click on on “File > Save Policies,” the modifications are instantly transferred to the registry.
Note: You ought to at all times create a backup earlier than making main modifications to the registry. You can use the Registry Backup Portable instrument for the registry alone. Or you’ll be able to create a backup of the system together with your Windows backup program.
Use a restore system with extra features
Windows provides a restore system with just a few instruments. It is used when Windows now not begins and you should use it to revive the system from restore factors or uninstall updates, amongst different issues.
For the rescue system, boot the PC from the set up medium and choose “Repair my PC” in Windows 11 (Windows 10: “Computer repair options”).
The restore system begins a significantly decreased Windows (Windows PE, Preinstallation Environment) with out community and web entry.
However, there have been initiatives for a really very long time that considerably broaden Windows PE and equip it with further instruments together with community entry. By offering a ready-to-use mini-Windows, the builders are most likely working in a authorized grey space.

Putting collectively a rescue system: Phoenix PE creates a Mini-Windows with quite a few instruments and applications. You can select what to incorporate.
IDG
However, some interpret Microsoft’s restrictions in a different way and make full PE methods accessible for obtain, akin to Hiren’s BootCD PE.
You are on the legally protected facet if you happen to put collectively the PE system your self.
This article initially appeared on our sister publication PC-WELT and was translated and localized from German.