How to permanently block KB4012218, KB4012219 and releated updates?

Question

It appears Microsoft plans on antagonizing or punishing users who want to use Windows 7 and Windows 8 by witholding security updates to the defective product. It appears the updates that accomplishes it are KB4012218 and KB4012219.

I still use Windows 7 and with an occasional Windows 8. I have not acquired a taste for Windows 10. I don't agree to the change in the terms of service, and I don't agree to throw away my investments and purchases. I would like to permanently block the updates.

How do I permanently block KB4012218, KB4012219, and other related updates?

I've got a feeling a Hide this update in the Windows Update control panel is not going to work as expected. We know a bit about how Microsoft is going to handle things from the Get Windows X malware. That's why I am looking for a way to block "related updates", too.

Solution 1

The Preview Updates are released next month as Monthly Quality updates, which includes Security Fixes + the Preview Roll from last month. And because all newer Monthly Quality updates include all older Monthly Quality update rollups you can't block them.

To avoid that you get the new Update Client that prevents you to scan for new updates on a AMD Ryzen or Intel Kaby Lake cpu, only install the Security Only updatepacks each month to have a system that is secure and up to date.

The April 2017 Security Only Update also seams to include the Update check. What you now have do is to use WSUSoffline to get new updates to avoid using Windows Update.

Solution 2

This is not an exact answer to this question, but people have created patches to circumvent the update mechanism.

Blog Post : https://www.bleepingcomputer.com/news/microsoft/user-made-patch-lets-owners-of-next-gen-cpus-install-updates-on-windows-7-andamp-8-1/

Actual patch : https://github.com/zeffy/kb4012218-19

The only downside of these solutions is you have to apply a new patch whenever wuaueng.dll [the patched DLL file] gets updated.