How to only allow Windows Update in Windows Firewall?

Question

Basically I don't have much Data to spare. So whenever i switch on my Wifi, so many programs try to get updates. . and just like that it drains around 100 MB no matter what. This happens even if i don't open any programs.

Also if i open any other programs during the update, the update gets interrrupted and tells me to retry which means re-download from the beginning (if i haven't restarted).

I just want the newest Windows features in my laptop and probably correct any bugs from the previous update. So is there anyway to block every other programs and only allow Windows 10 update application to pass through using Windows Firewall?

Thanks in Advance

Answer 1

Here is more expert discussion on how to allow only Windows Update through the firewall:

https://superuser.com/questions/1072539/windows...

https://superuser.com/questions/994306/what-fir...

https://answers.microsoft.com/en-us/windows/for...

Answer 2

"Be aware that in Windows 10 they break out more svchost processes than in previous Windows editions so seeing a lot of them is normal,". . 😃 that i figured.

" although you may still want them restricted."

how to restrict them? is there any ways to control each single one?

i mean there's a bunch of them active some inactive can see them eating my memory at times ~ 1 - 10 MB (not a big trouble i guess) when most of memory and disk is eaten by browsers and other programs ~ 400 MB🤷‍♂️

"Also there are always unintended consequences with running Windows outside of it's default configurations or with modifications, so those are to be expected"

ya on that one. i would like to know would there be any complications if i disable those two outbound rules right after updating? 

i am curious about the warning when i made svchost.exe outbound rule. will it affect any other programs from functioning properly if i disable it (deny internet access for svchost.exe; deny internet access to virus or malware if infected)?

Answer 3

Thanks for the help.

I created a new rule in Outbound Rules while blocking everything as above

saying to allow

%SystemRoot%\System32\svchost.exe

i think it's the same as

C:\Windows\System32\svchost.exe (please confirm)

and then it showed me this warning and anyway i clicked OK > NEXT

and there it is. . it's updating.

I donno whether that's the right way to do it or is there any particular svchost.exe for it. i have svchost.exe being infected in the past while i was using windows 7. so donno the correct location of svchost.exe for this windows updating. 😃

but weirdly as soon as i allowed there was a bunch of

Service Host : *** running in background processes which were idle before that.

Please advice.

And I donno how to add these windows update domains as suggested in one of ur solutions.

in the rules. Windows Firewall only has Program, port, ip, custom.

where do i add them?

Answer 4

Can u please confirm whether the location and name of the Windows Update is correct?

I've already blocked entire firewall from accessing internet

and made a new rule in Outbound Connections just to pass the windows update.

or do i need add some more rules with other applications in Inbound Rules as well?

Answer 5

Hi Adnan. I'm Greg, an installation specialist, 10 years Windows MVP, and Volunteer Moderator here to help you.

The way to prevent other apps from auto-updating is to turn them off at Startup, along with all others that freeload at Startup and use System Resources unnecessarily. This is covered in Step 4 of this Performance checklist:

http://answers.microsoft.com/en-us/windows/wiki...

You would not want to block these apps through the firewall as they may need to connect to the internet to even function at all. See this excellent guide on how to manage Window Firewall:

https://www.liquidweb.com/kb/windows-firewall-b...

I hope this helps. Feel free to ask back any questions and keep me posted. If you will wait to choose if I resolved your problem, I will keep working with you until it's resolved.

________________________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.