Disable automatic updates
We prohibit the "SYSTEM" account access to the file that is responsible for searching and downloading updates.
|
1 2 3 4 |
@echo off takeown /f "C:\windows\system32\usoclient.exe" /a icacls "C:\windows\system32\usoclient.exe" /deny *S-1-5-18:F pause |
Enable automatic updates
|
1 2 3 4 |
@echo off takeown /f "C:\windows\system32\usoclient.exe" /a icacls "C:\windows\system32\usoclient.exe" /grant *S-1-5-18:F pause |
In the Update Center, search and download can still be started manually.
Completely disabling the update service
Press Win + R, enter services.msc, launch. In the window that opens, we look for the "Windows Update" service, go to its properties (RMB properties), on the "Login" tab, change the login from the system account to the "Guest" account. This is a built-in Windows account, you can use any other one instead, as long as it has limited rights.
At the next boot, the system will not be able to start the update service, since the account we specified does not have the right to do so.
With the service disabled, updates cannot be installed even manually.
