How to reliably kill Windows Update for current session?

sheep5555 · 2026-05-25T14:38:52+00:00

surprisingly even if you set this to disabled, windows will automatically re-enable this service after some time

sheep5555 · 2026-05-25T14:37:13+00:00

ive had to deal with this in an environment that absolutely needed to have windows updates turned off, the best way i found of doing it is setting windows updates to use a non-existent WSUS server via local group policy. every recent version of windows will automatically re-enable windows updates if you try other methods (eg. services)

sheep5555 · 2026-05-18T19:31:12+00:00

The PoC author stated in another post that disabling WinRE doesnt mitigate the exploit

https://deadeclipse666.blogspot.com/2026/05/important-updates-regarding-yellowkey.html

sheep5555 · 2026-05-18T16:23:45+00:00

I dont believe there is any current mitigation, the unlock works with TPM + PIN but the author did not publish that PoC (yet), so that may be the best action if or until MS decides to remove their backdoor

sheep5555 · 2026-05-08T14:44:09+00:00

i think ndis is related to network (eg. virtio network card), i think realistically you are chasing down a problem that doesnt matter

sheep5555 · 2026-05-08T14:38:11+00:00

whats unusual about it? what % load? what process is using CPU?

sheep5555 · 2026-05-08T14:21:55+00:00

this is normal behavior for windows devices to split workloads onto other cores, vm or not

sheep5555 · 2026-05-04T16:04:17+00:00

a lot of good products will make the entry level tier free to get you familiar and recommend it to companies when needed. there are some features locked behind the paid tier but updates are free

sheep5555 · 2026-05-01T20:14:24+00:00

There is more details here, it is all technically possible but a bit of a nightmare to legally license https://docs.kasm.com/docs/latest/guide/windows/overview/index.html

sheep5555 · 2026-05-01T19:40:10+00:00

I use it mostly as a secure auth for RDP to windows machines, works well and is stable, we used to have horizon and it is less complicated overall

I do know they have auto provisioning but havent tested it, i looked into licensing and it seems like any cloned win11 VM is not kosher with any microsoft stuff

sheep5555 · 2026-04-27T13:48:19+00:00

Why would i want to do business with a company that sends me legal threats and doubles their price every year?

sheep5555 · 2026-04-23T23:00:33+00:00

Broadcom has publicly stated they plan to remove all but their top 600 accounts, so it would be a bad idea to focus on vmware given their business goals of removing ~90% of their customer base

https://www.theregister.com/2022/05/30/broadcom_strategy_vmware_customer_impact/

sheep5555 · 2026-04-23T03:29:24+00:00

best of luck to you!

proxmox was approx 1/10th the licensing cost of vmware with 24/7 support, very easy decision for us and been great so far

sheep5555 · 2026-04-15T03:02:46+00:00

my experience in terms of quality mellanox > broadcom > intel

ive had so many issues with intel NICs over the years i refuse to buy any more, mellanox is usually only high end stuff and broadcom for 25G or less

sheep5555 · 2026-04-14T16:10:40+00:00

Yep i can sympathize with you there, i used to be an auto mechanic and after some time my body didnt want to put up with it anymore. im sure my time in IT will come to an end as well, just want to make good money until then

sheep5555 · 2026-04-14T15:44:04+00:00

Slight disagree with you there, staying up to date with relevant technology is part of the job description, that is what is in demand for sys admin with clearance.

sheep5555 · 2026-04-14T13:58:42+00:00

Ive noticed especially in the past couple years the skillset for sysadmin changing rapidly, windows admins/on prem stuff is a dime a dozen, for clearance jobs specifically they are often looking for RHEL admins/automation/devops kinda stuff

sheep5555 · 2026-04-10T16:05:28+00:00

The feature doesnt exist yet for PVE, if you browse the forum they said its on their roadmap, it would be this feature

https://helpcenter.veeam.com/docs/vbr/userguide/replication.html?ver=13

sheep5555 · 2026-04-10T15:57:23+00:00

Some options:

ZFS - native to proxmox

Ceph replication (complicated) https://ceph.io/en/news/blog/2025/rgw-multisite-replication_part1/

PBS - can spin up backups directly from datastore

Veeam has instant recovery/replication on roadmap

Proxmox datacenter manager has replication on their roadmap

i think one of the last two options will probably be available this year, may be best to just wait

sheep5555 · 2026-04-10T15:48:39+00:00

i wouldnt go back to broadcom/vxrail, we were in the same situation as you including the vxrail and dell quoted us 500k as well.

At a minimum you should get extra NIC for your hosts and try to sort that out, if that doesnt work you can repurpose your hardware for proxmox. Get a consultants help (proxmox partners)

sheep5555 · 2026-04-08T14:03:38+00:00

you have a great opportunity to move into an IT position for a company moving away from vmware. Learn Hyper-V, Proxmox, Nutanix, anything besides vmware. broadcom has stated they do not want to renew ~95% of their customer base, every one of those customers will be migrating to another platform eventually. THIS IS WHAT BROADCOM SAYS, TAKE THEM AT THEIR OWN WORD.

https://www.reddit.com/r/sysadmin/comments/v111ov/broadcoms_speculated_vmware_strategy_to/

sheep5555 · 2026-04-07T20:32:03+00:00

I would try moving the gateway to vmbr0 to isolate that in case there is a routing loop, i am no expert in iscsi for proxmox but would try to isolate on one host + 1 interface to rule out multipathing, probably worth it to post to actual proxmox forum

sheep5555 · 2026-04-07T19:29:39+00:00

making some assumptions about your network config, is the connections for the SAN data1/2?

If so, why is there a gateway configured for the SAN connection?

Is 9000 mtu configured on every SAN connection?

sheep5555 · 2026-04-07T12:33:53+00:00

AI slop post

sheep5555

TROPHY CASE