Hide Windows updates

[clarensio]

As in NTLITE we can "add/insert" updates, is there a way to hide updates (like KB4023057) and, therefore, not install / view them?

If it's not possible in NTLITE, is it possible with a .reg file instead?

Like what you can do in post-production with the MS utility [wushowhide.diagcab]

 

[crypticus]

I recommend you to use "wumgr" because "wushowhide.diagcab" is so slow.

or

Via Powershell (check here for details https://pureinfotech.com/hide-updates-windows-10/)
Hide-WUUpdate -KBArticleID KBNumber
Hide-WUUpdate -Title "UpdateTitle"
To UnHide Add -HideStatus:$false to end of whatever you use.

There is also a wscript way, but i don't recommend it. I was using a cmd version of this but i forgot and can't find it. powershell would do the trick too.

 

[garlin]

Not for an offline image. WU's database is undocumented. There are 3rd-party tools or scripts making a few DLL calls to manipulate it. But you need an existing WU database, which is missing for an offline image.

To make this work:
Disable WU setting for auto-download (notify only), then run your hide updates tool/script in Post-Setup.

PSWindowsUpdate is a popular PSH module, except you have to install it before running scripts. There is an older VBS script which might still work for W10/W11. This would not block any updates forced during OOBE WU (which requires the fake WSUS trick).

 

[clarensio]

Thank you both

I already use WUMT (for historical affection) and also WUMGR of Xanatos both to disable automatic updates and to filter them but the purpose of the question was to "hide" some updates for those who have to use Windows Update.

Maybe I study the powershell command (which you can't get to work at the moment) maybe as a post-setup script.

Thanks again