Windows 10: Stop Windows 10 Updates Properly and Completely

The only question I have is when manually installing an update via DISM or installing via downloaded .cab or .msu files it would appear that the configurator needs to be run to enable the updates to install particularly if a reboot is required to complete. Is that correct?

wusa.exe "FullPathTo.msu"

dism /online /add-package /packagepath:"FullPathTo.cab"

Or at least every time I tried to manually install a cumulative update installation failed until WU service was set to default startup type. That might be specific to my machine though.

 

Mine is just a more aggressive approach to the problem.

You can either install updates that you mentioned during Step 4, or using the Configurator.

 

Thanks for clearing that up. I did end up using the Configurator. *Smile

 

This Home Edition user has never used it, and no updates have been downloaded automatically.

 

What method are you using?

 

Originally Posted by Matthew Wai


This Home Edition user has never used it, and no updates have been downloaded automatically.
pf100 What method are you using?

I, too, use Windows 10 Home x64; and disabling Windows Update service suffices in preventing updates.

On occasion(s), I might have absentmindedly** forgotten to re-disable after securing a Cumulative Update, and I got an Update delivered, last month. After its installation, I disabled the service and did not receive March's Cumulative Update.

I did download March's early kb offer posted by Brink and held out on installing until this weekend that just passed. When I tried to install, it failed. Went online and found the kb was no longer on the docket, and a newly released kb was processed.

** Prior to February's Update delivery, my system would occasionally freeze completely, leading to a reboot. I'm not so OCD that I would make sure Windows Update remained disabled after such a reboot from a freeze. So there's a possiblility that a freeze and reboot triggered the reset of Windows Update to Automatic, instead of me absorbing the blame with my absentmindedness. I have increased slightly the frequency of surveying the status of Windows Update service by incorporating the chore into a daily routine.

 

I'm glad your method is working for you. I'm not saying my way is the best or that you should even use it. I started the script as a project to use for myself and if it helps someone then all the better.

USOClient, WaaSMedic, SIHClient, and remsh have many tasks that force windows updates on. USOClient (and probably the others) downloads windows updates even if the Windows Update Service is off. So I'm amazed that you aren't getting forced updates.

 

The last three of the four mentioned have, in the past, tried to access the internet. With Norton's firewall registering these attempts, they have been blocked. After Windows 10 Feature Updates, such blocks may need to be reapplied.

I understand USOClient is triggered for offline update installation.

 

Thanks for the info.

 

Metered connection. See the screenshot at Enable or Disable Windows Update Automatic Updates in Windows 10 - Page 55 - Windows 10 Tutorials
I set the connection as metered via Regedit. See How to prevent downloading updates? - Windows 10 Forums

This Home Edition user has NEVER disabled the "Windows Update" service, and updates have NEVER been downloaded automatically. A message will pop up automatically when updates have been found. See the two links above.

 

I have disabled UsoClient.exe via the commands below, and I have successfully installed all updates.
Enable or Disable Windows Update Automatic Updates in Windows 10 - Page 48 - Windows 10 Tutorials

 

Just for FYI, for the above link to work with a non-english language version of windows, instead of translating the user account names, Well-known security identifiers should be used:
Code: takeown /f "%WINDIR%\System32\UsoClient.exe" /a icacls "%WINDIR%\System32\UsoClient.exe" /inheritance:r /remove "Administrators" "Authenticated Users" "Users" "System"[/quote] should instead be:
Code: takeown /f "%systemroot%\System32\UsoClient.exe" /a icacls "%systemroot%\System32\UsoClient.exe" /inheritance:r /remove *S-1-5-32-544 *S-1-5-11 *S-1-5-32-545 *S-1-5-18[/quote] Also, to restore TrustedInstaller as owner of USOClient.exe:
Code: takeown /f "%systemroot%\System32\UsoClient.exe" /a icacls "%systemroot%\System32\UsoClient.exe" /reset icacls "%systemroot%\System32\UsoClient.exe" /setowner *S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464[/quote]

 

The commands in the link already work with my Chinese version of Windows 10.

 

That's interesting that it works for the Chinese version. In the French language version you have to use
Code: icacls "%WINDIR%\System32\UsoClient.exe" /inheritance:r /remove "Administrateurs" "Utilisateurs Autentifiés" "Utilisateurs" "Système"[/quote] That's why I use
Code: icacls "%systemroot%\System32\UsoClient.exe" /inheritance:r /remove *S-1-5-32-544 *S-1-5-11 *S-1-5-32-545 *S-1-5-18[/quote]

 

I did not know you are French.