Chapter : 9

Configuring Windows Update

& Recovery

9.0 Module Objectives

9.1 Windows Updates
9.2 WSUS
9.3 Summary
9.4 Check Your Progress Answers.
9.5 Questions for Self Study

9.0 Module Objectives

At the end of the module, you will be able to:
Configure System Updates to manage system stability.
Understand and perform Windows 10 System and Data
Recovery.

9.1 Windows Updates

Windows Update is a Free Online Service from Microsoft. It
allows users to detect and install
updates for Microsoft products installed on a Windows system.
The types of updates are:
Service Packs: It is a periodic update that corrects problems
in one version of a product.
Service packs provide tools, drivers, and updates that extend
product functionality, including enhancements developed
after the product was released.

Configuring Windows Update & Recovery / 137

 Regular Updates: These are code fixes for products that are
provided to individual Windows 10 customers, Updates are
not intended for general installation. It can be noted that,
customers may receive a custom update that is designed to
enhance functionality present only within their organization.
Security Updates: These updates address security
vulnerabilities. Attackers seeking to break into systems can
exploit such vulnerabilities. Security updates are similar to
regular updates but it is considered mandatory and it must
be deployed as an when required.

9.1.1 Deploying Windows Updates

There are 3 methods to deploy windows updates to
corresponding Windows 10 PCs. They are:
Manual Method: It is recommended for local users of
Windows 10 PCs, typically for Personal devices or Non-
networked Devices.
WSUS, Windows Server Update Services Method : It is
recommended for Small to Medium Enterprises. To deploy
windows updates on corporate devices. The WSUS service
is installed on the company server and this WSUS server
authorizes the corresponding devices to receive the updates
deployed by the Server.
The large diversified enterprises prefer automated method of
Update deployment, this is possible through integration of
SCCM, System Center Configuration Manager and WSUS
server. This integration leads to automated deployment of
Updates. It should be noted that, in Windows 10 Manual
method, the users cannot select specific individual updates
to install. While Administrators from SCCM, WSUS and
Intune can select specific updates to be approved for
installation.

9.1.2 Windows 10 Manual Updates

Manual Method for Windows Update is preferred for Personal

138 / Operating System 1

computer users.
The screenshot shows manual configuration of Windows
Update and Security in Windows 10,
On your Windows 10 PC, Open Settings, navigate to Update
and Security, Now click on "Windows Update” and select the
button “Check for Updates”, When this button is clicked, your
Windows 10 PC connects to internet to search for the
corresponding updates from the internet.

9.1.3 Configure Restart behavior for Windows 10 PCs.

After successful installation of updates, the PC needs to be
restarted, in order to apply the updates to your system.
To configure Restart Behavior:
On your Windows 10 Settings, navigate to Update and
Security option, Select to Open Windows Update. Select
Advanced Options,
You will see the option “Choose how updates are installed”.
As shown in the image, it provides 2 options that are
explained as:
First Option is “Automatic (recommended)”. This option
automatically notifies the users to restart the PC, after
installation of updates.
The second option is “Notify to schedule restart”. This option
allows the users to
choose the period within 7 days to restart the PC, after
installation of Updates.

9.1.4 Schedule Default Automatic Updates

Default Automatic Updates can be scheduled using Task
Scheduler.
The Task Scheduler enables you to automatically perform
routine tasks on a specific computer. Task Scheduler does this
by monitoring and executing the criteria set by administrator.

Configuring Windows Update & Recovery / 139

 On your windows 10 PC, open search to find “task
scheduler”, use "Run as Administrator” option to open Task
Scheduler.
Select Task Scheduler Library, navigate to Microsoft and
select "Windows Update"
Now select Schedule start for scheduling default Automatic
Updates.

9.1.5 Removing and Hiding a Windows Update

Updates consists of Security and Bug fixes, but it may contain
unnecessary files like driver updates, some computers don’t
need these unnecessary updates.
So, in order to disable or hide unnecessary Windows
updates. The file used is "wushowhide. diagcab”,
This file is a free downloadable utility from Microsoft website
You can select the updates that needs to be hidden or
disabled.

9.1.6 Manage Update Delivery

The primary task of a Windows Administrator is to manage
the delivery of Windows Updates.
Basically, management of update delivery is “Where” and
“When” of the updates.
Updates and Upgrades comes from, either the Central
Source like Microsoft Update Server, where the individual client
connects to update its database OR Updates can be received
from Peer devices or LAN based WSUS servers.
The updates and upgrades actually install in following
sections like:
Pre-release: It is a Windows Insider program with preview
features of Windows 10.
The second supported method is to install new builds on a
present release

140 / Operating System 1

 For Corporate computers, updates/upgrades can be delayed
or defer the new builds. Additionally, Microsoft developed LTSB
(Long-term Servicing Branch), this edition will "Never do a
Feature update” for 10 years.

9.1.7 Windows Update Delivery Optimization

Windows Update Delivery Optimization, lets you get Windows
updates and Windows Store apps from sources other than
Microsoft.
By using Windows Update Delivery Optimization, your
computer can send/receive updates to/ from neighboring
computers.
To access Windows 10 Delivery Optimization the steps
performed are:
Open Windows 10 Settings, navigate to Update & Security,
select Windows Update Advanced Options, and click on
"Choose how updates are delivered”.
The image shows the option "choose how updates are
delivered’. As per image, you can enable this option and
choose any of the following 2 sub-options like:
Send updates to local network PCs or
Send updates to local network PCs and PCs on internet.

9.2 WSUS
Windows Server Update Services, previously known as
Software Update Services (SUS), is a computer program
developed by Microsoft Corporation that enables administrators
to manage the distribution of updates and hotfixes released for
Microsoft products used in devices of a corporate environment.
WSUS runs on a Server with Windows Server 2012
Operating System, but a WSUS server can update both servers
and clients in your corporate environment.
Pre-requisites for WSUS are:
ASP.net, IIS (Internet Information Service) roles and features

Configuring Windows Update & Recovery / 141

 installed on the server.
The core advantages of WSUS are
Approval Mechanism is where updates are downloaded from
Microsoft site but, WSUS administrator select and approves
the important updates that can be installed.
WSUS ensures saving of Broadband Bandwidth (since only
WSUS Server connects to Internet to download the updates,
rest all the corporate PCs are updated using LAN
infrastructure).
WSUS also generates log reports that is important for
administrators to verify and troubleshoot Updates.

9.2.1 Integrating WSUS with SCCM

For multi-national corporate, also known as multi-site
environments, WSUS can be integrated with SCCM (System
Center Configuration Manager).
Point 1 in image is corporate WSUS server is updated by
online Microsoft Windows Update server. It should be noted
that this corporate WSUS server is the only server that
connects to Internet (and later updates the client PCs using
LAN). In the image WSUS Server SUP means (Software
Update Point).

While point 5 shows, in case absence of SCCM servers, the

WSUS (SUP) can directly update the managed servers in the
infrastructure.

9.2.2 Update Defender and Apps

Windows Defender is an anti-malware component of
Microsoft Windows since Windows 8 Operating system.

142 / Operating System 1

Operating system versions prior to Windows 8 used "Microsoft
Security Essentials”, now Windows Defender has replaced
Microsoft Security Essentials.
Windows Defender is also an inbuilt part of Windows 10
Operating system. Defender Updates are automatic and occur
by default. Possible data sources are Online Microsoft Update
Site and WSUS.
Windows Store is also known to host Universal Apps for
Windows 10. By default Apps are updated at User Login or every
4 hours. In your Windows 10 Machine, open Settings, navigate
to Update and Security option, select "Windows Defender”. You
can enable/disable Windows Defender, but it should be noted
that if you disable Windows Defender, you will leave your PC
unprotected and prone to virus attacks.

9.2.3 Understanding File History

File History is Windows 10's main file backup tool, originally
introduced in Windows 8. File History saves copies of files to
local/removable or network drives.

The Default file location included is Libraries and User profiles

like Desktop, User Documents and contacts etc.
Note: File History can be disabled by Group Policy. Also, it should
be noted that File History is not designed for backing up entire
hard drive, the specialized job is file history is "File backup and
recovery”.

9.2.4 Working of File History

The default schedule of File History is to save files every 1
hour.
You can access file history by following 2 methods:
Method 1: On your Windows 10 PC, open Control Panel
navigate to File History.

Configuring Windows Update & Recovery / 143

 Method 2: On your Windows 10 PC, open settings, navigate
to Update and Security, click on Backup.

9.2.5 Previous version Tab in File History

Once File History is configured, you will see the "Previous
Versions” Tab.

Restore point is used to restore images, basically the backup

images from the Backup and Restore Tool. Previous version only
allows you to view the protected files in File History.

9.2.6 Windows 10 based “Backup and Restore Tool”

Backup and Restore Tool is a control panel utility in Windows
10. Backup is saved in a “vhdx file format”. It should be noted
that, a restore can read a backup file format.
The vhdx file format, can be mounted in a Windows 10 Disk
Management utility.
To access the Windows 10 Backup and Restore Tool.
On your Windows 10 PC, Open Action Center > All Settings
> Update and Security > Select the option "Backup” > click
on the link "Go to backup and restore (Windows7)”.
OR, open Run, type "control”
Select the option "Backup and Restore (Windows 7).”

9.2.7 Backup and Restore in Windows 10

Backup and restore uses VSS (Volume Shadow copy
Service) based technology.
First backup is a full backup, it contains all the selected files
for the specific drive.
From second backups onwards it is an “incremental” backup.
Incremental backup is a copy which contains only those files

144 / Operating System 1

which have been altered since the last full backup.
It should be noted that Backup and restore cannot backup
individual files, you have to use file history to backup specific
files. Also, Backup and Restore can be executed using
scheduled task.

9.2.8 Windows 10 System Repair Disc

System Repair Disc is a Copy of Windows RE (Recovery
Environment).
System Repair Disc can boot any computer system from
recovery DVD or CD.
System repair Disk is used for:
To start systems that won’t boot normally or at all.
Perform advanced troubleshooting using Recovery Tools.
Restore a customized system image from a network location.
Handy for repairing stand-alone remote systems.

9.1, 9.2 Check Your Progress.

1) System Repair Disk is a Copy of ...................
2) Backup and restore uses ......................
3) Perform advanced troubleshooting using ................

9.3 Summary
Software Updates are free online service from Microsoft
Allows users to detect and install updates for Microsoft
products. Update types are:
Service Packs
Regular Updates
Security Updates
3 methods to deploy windows update are
Manual
WSUS
WSUS+SCCM.

Configuring Windows Update & Recovery / 145

 "wushowhide.diagcab” is used to disable or hide updates.
Windows 10 supports delivery optimization of Updates, by
transfer of updates to peer machines or receive updates from
the peer machines.
WSUS runs on Server but updates servers and clients. For
corporate environments, WSUS can be integrated with SCCM
(System Center Configuration Manager).
Windows Defender is an anti-malware component of
Microsoft Windows.
File History is Windows 10's main file backup tool, it saves
the copies of files to local/removable or network drives.
The default schedule for file history is to save files every 1
hour.
Backup and Restore Tool is a control panel utility in Windows
10. It is based on VSS.
System Repair Disc is a copy of Windows RE. It can boot any
computer from recovery DVD or CD.

9.4 Check Your Progress Answers

9.1, 9.2
1) Windows RE (Recovery Environment)
2) VSS (Volume Shadow copy Service) based technology
3) Recovery Tools

9.5 Questions for Self Study

1) Explain the types of updates available in Windows Update?
2) What are the different methods of deploying Windows
Updates?
3) What do you mean by Windows 10 Delivery Optimization?
4) What is the use of Windows Defender?
5) Differentiate between "File History” and "Backup-Restore
Tool” in Windows 10 Operating System.
6) What is the use of System Repair Disc, in Windows 10?

146 / Operating System 1

 Notes
____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

Configuring Windows Update & Recovery / 147

 Notes
____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

____________________________________________________________________________________

148 / Operating System 1