Hi, during last several updates of Win 10, I have noticed that those updates are installing very slow.
When I’m disabling security for all CIS components, updates are installing pretty fast. Also I noticed that my hybrid HDD is 100% used during the update, so I’m assuming that Microsoft updates are scanning during the installation and since they have a lot of small system files, CIS prevents fast installation of the updates.
I also assuming that Microsoft updates have signed with trusted certificates, which seems are not taking into the account by CIS.
Could you please let me know how can I add windows update to the trusted or ignored processes, because even with my not too much outdated hardware I’m experiencing permanent lags during the windows update and update can take up to 4 hours sometimes without disabling CIS components which is not good because I’m using my laptop and surf Internet during the update.
CIS Premium: 12.2.2.7098
Windows 10 Pro version 20H2
HDD: SSHD FireCuda Gaming ST1000LX015
CPU: i5-8300H
RAM: 16 Gb
You can either add the Windows folder to scan exclusions excluded paths or add various windows processes to excluded applications. I think svchost and maybe others are used for performing windows updates, you can use resource monitor and view the disk tab during installation of udates to see which processes are using the most writes, then add them to excluded applications.